http://en.blog.wordpress.com/2011/04/13/security/

this is just great … at least they notified their users in a timely manner. Change your passwd if you have wordpress.com account.