User lockouts, combined with requirements for new passwords, indicate an attack on accounts at the popular social media platform.