I can't believe it happened but I did it...
Let's assume following scenario - we have Production org with user1@example.com (that's the only user I have access to on prod).
Then we have 2 developer sandboxes - S1 with user2@example.com and S2 with user2@example.com (note that these are the same users on both sandboxes). Now I'm going to refresh S2 directly from S1 by clicking "Refresh" on prod with context of user1@example.com.
I tried to login to S2 using original username from before refresh - doesn't work.
I tried using production username with suffix of my refreshed sandbox - doesn't work.
After the refresh is done, it seems that S2 doesn't have ANY active users... All of them are having '.invalid' suffix on their email addresses.
Anybody have any idea how to handle this?