Web hosting company Hostinger forces password resets after an unauthorized access token exposes the usernames, emails, and hashed passwords of 14 million customers. The company insists no financial data is compromised while an active investigation continues.