Update: StockX says that the password reset emails were actually sent after detecting suspicious activity, more details HERE. We have also updated the article's title to reflect the new development.