Comment 3 for bug 1379863

Correction: the impact is limited to users who have changed their passwords (like on login.ubuntu.com) or who get their token invalidated by other means (removal of the app access in https://login.staging.ubuntu.com/+applications).