GitHub mirror compromise incident report
Something to note here: "Evidence collected suggests a password scheme where disclosure on one site made it easy to guess passwords for unrelated webpages."<p>For any folks out there who've been using or promoting formula-based passwords, this is the potential impact: a leak on one site can be leveraged by an attacker towards other sites you use.