As a precaution we are asking our customers to reset their passwords." The company gave some standard advice including urging users to update anti-malware software and run a full scan of computers that have Xero installed before changing passwords. Those who do not make the change will be asked to do so the next time they log into Xero. The company also pointed users to its Cloud Security Small Business Guide and offers a link to its description of the company's security practices on its security page.