Seriously... has everyone changed their passwords?

It's likely (somewhere in the 100%-chance range) all account names and passwords have been widely distributed within the hacker world. Change your password, and any other matching account name and password on all other systems or forums you access.

FWIW, nearly no systems are secure. Using the same password on various sites is a bad idea. It's a pain (to track unique passwords), but worth the effort.