That's more of a DoS attack than a breach of security. You can detect mass password rests and determine if that is happening. However, in practice, I've never r

That's more of a DoS attack than a breach of security. You can detect mass password rests and determine if that is happening. However, in practice, I've never really heard of this happening (I'm sure someone will point me to some examples). But again, this is just another sort of DoS attack.