Some websites and security schemes have a "timeout" set, so every X number of days, the system itself automatically asks you to reset your passwords without any particular incident prompting the need to change. That's a possibility too.