Forgot my password doesn't work nor the settings screen password change.
If you gonna ask all your users to reset passwords you might want to actually scale up to allow them to do that
This. And also if you know what "limited subset" of accounts were compromised, you might want to notify only the users affected, and reset the passwords for them.