I’ve just had a rather odd mailshot from Google.
Subject: “Google customer alert”
“Dear G Suite Administrator”
It goes on to explain that, for reasons expained in the email, they have been storing some of my users’ passwords in unhashed format. It reassures me there is no evidence the unhashed psswords have been misused, but includes a specific list of “impacted” users, who will be required to change their passwords tomorrow.
If the impacted users haven’t changed passwords within a week, their passwords will be reset by Google, requiring acccount recovery procedures if they want to log in again.
