The rail firm reset passwords after detecting efforts to break into some accounts earlier this month.