Nothing has been leaked, we implemented a password expiry system, too many people met a certain criteria that was scary infact, 1/100th of the community maintaining their accounts security didn't look good at all.
This affects players that are slightly inactive, with no 2FA enabled and no password changes for years, with all the recent account sharing, trading, selling, xyz server leaked, we had very little options to help players maintain their accounts properly.
Some players will receive a password expiry notice on login to confirm and update, the more serious cases have been force-expired because of multiple locations (countries) logging into one account meeting the criteria.