Report a password-reset incident as recovery becomes uneven

When some users can reset passwords again but others cannot, describe the scope without exposing accounts. Give the service, approximate start time, broad region, affected platform, and the exact step that succeeds or fails. Separate reports from your own tests: “The reset email arrives for one test account” does not establish that all accounts have recovered.

Compare the same action before and after the reported fix if safe, and note whether delivery delays persist. Avoid sharing reset links, codes, email addresses, or screenshots containing tokens. Check the service’s official incident channel for updates. If a reset was submitted multiple times, use the newest valid link only after confirming the provider’s instructions. A timeline of verified changes is more useful than a blanket “fixed.”