Vendor insists there's no evidence of unauthorized access, but it's asking customers to take one of the most drastic precautions available