my viewpoint was once there is a breach there will be anger and maybe 20% of our customers don't come back. not resetting passwords and possibly further endangering your customer base seems like a bad idea.

but i can see someone taking your viewpoint... which is worrying.