Adobe are handling this like a bunch of amateurs - I changed my password yesterday (when just trying to log into the site automatically triggered the request to create a new one), and they've just emailed me the generic "we recently discovered blah blah blah please create a new password " notice
Going to go and log in and see they make me change it again.
Edit: nope, my password from yesterday lets me in without forcing another reset