Passwords weren't touched at all, and all session tokens were invalidated. No need to do anything

huh

True, but probably wouldn't hurt either way
(Still a good practice to change passwords every now and then anyways)

It's much better to have one secure password, and leave it be. Changing it encourages people to use weaker passwords to make it easier.

Yes, changing passwords has been shown to make it easier for people to break into accounts because people start using paradigms or recording the passwords.

The only thing changing your password does it lock out someone who already has your password.

I think the alleged twitter hacker claimed that they found the passwords in a plain txt file while people were yelling and threatening them, in typical manner on fatfur accounts. God bless the community(????).

Anyways, i'm not itching for drama but i might advise it and double checking, we seen how eager phishers on discord have been for fake accounts, it might be good practice to double check paypal/boosty payment service addresses match the person and that no other services get hacked into.

But it's your guys accounts, not mine. Do as you will.