For those customers who are still logging in with FTP…

As a precaution they reset everyone’s email passwords, presumably from an assumption people use the same ones for both.

I’m surprise they still let people use FTP.

I came across such a thing recently. The counterparty was a bank, and they point blank refused to update their processes so the people I talked to had no choice but to continue to use something they knew was hopelessly outdated. SFTP was released what, 3 decades ago or so? There is a good chance that whatever was on the other side of that upload was not capable of any kind of secure connection.