Answer
In cases of a breached account, we recommend that the organizational admin take the following steps:
- Go to the Manage Users page and deactivate the user from your organization
-
Note: If the user is a member of multiple organizations, the org admin of each organization will need to deactivate them. 
-
Have that user reset their password from the Viz login screen (using the Forgot your password? link)
-
Two hours after the password reset was initiated (once the access token has expired), reactivate the user.