Is it possible that as an “aftermath” of todays incident, existing user sessions were invalidated? We see that several of our users, that should have a valid session, get a 401 response and need to re-login.

No that's not possible really. Do you have any identity ID and time when the 401 happened, then I'll investigate a bit?