Heroku to begin user password reset almost a month after GitHub OAuth token theft

Heroku users urged to change password now before company does so, and notes it will wipe out all API access tokens.