Check account activity and file findings so you understand the scope of the concern.
Revoke other sessions or application passwords as needed. The current operator’s session is retained.
Send reset requests or use supported file recovery actions. A reset email alone does not change a password.
Test the site, review remaining findings and address the cause before considering the response complete.
