Will changing the value of $drupal_hash_salt in settings.php file break site
Disruption should be minimal -- the salt value was designed to be changeable. As it says, it will invalidate one-time login links when the salt is changed. But if you suspect that you've been hacked, this is precisely what you want to happen.