Curious... Why does VPN access disruption suggest the breach may be deeper than initially disclosed?

My understanding is that this prevents anonymous access to servers which would help during investigation if any further unauthorized access showed up. But it doesn't confirm that unauthorized access continued. Just curious how you are thinking about this though.

Please say more about the Password Rotation. Where, how, which?

You are replying to submarine marketing.

Go change your password. And do it for every website you reuse that password.

The keyword was, “automated password rotation tools.”

Your question didn't include the words automated or tools, and your incomplete "where, how, which" was ambiguous enough to apply to the idea of password rotation generally rather than the tool's interactions with them.

What is ‘The Password App’? As in the built in ‘Passwords’ app?