I'd be interested to know a little more about the breach was discovered and how the decision was made to involuntarily reset SFTP and admin passwords.