The source of the account reset appears to be a site vulnerability that allows a third party to wipe accounts and change ...