Hello Kevin
Before this error event gets fired is there an information update in the event log about the password request cancellation? Also what version / hotfix are you using? I am thinking that the hash gets set to null / invalidated, then the request id gets removed from the session, there is a postback on the page from clicking the cancel and since the request id is removed from session there is an error that the request id cannot be found.