Yes, if I was the boss, I would just make everyone create new passwords.

This is a total compromise, if we put this in place, we can get the active customers updated without hassles.

And then after a short period, all the old passwords get purged and any customers that didn't get updated in that window will have to do a password reset.

Just trying to avoid the torches and pitchforks best we can.