We've, um, changed our password policy, says CafePress amid reports of 23m pwned accounts

Three-quarters of email addys already in breach database

Twee T-shirts 'n' merch purveyor CafePress had 23 million user records swiped - reportedly back in February - and this morning triggered a mass password reset, calling it a change in internal policy."