I’m guessing Apple detected irregular activity on the affected accounts. Long time ago I used a password across websites including Apple. That password was compromised on another site and apple forced me to reset. From that point on, I use a unique hard password for Apple and 2FA. Too much is at stake.Happened to me yesterday. Posted it in Twitter also. Had to change my password and login again on everything in the house. Sometimes I hate Apple.