I've had an email from vBulletin saying they are resetting everyone's password. Their network was compromised and user id's, encrypted passwords and I assume whatever other data for users they hold have been obtained in what they call a "sophisticated attack".