Another thread on the incident report here:
<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11664713" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11664713</a>
<a href="https:&#x2F;&#x2F;status.uservoice.com&#x2F;incidents&#x2F;fb7ml8b3nphf" rel="nofollow">https:&#x2F;&#x2F;status.uservoice.com&#x2F;incidents&#x2F;fb7ml8b3nphf</a><p>There&#x27;s a bit more info in this one about exactly what was compromised though.  While I can understand the abundance of caution in resetting passwords despite only hashes and salts being lost, it is odd that they would &quot;[presume] the attackers may be able to decrypt the passwords,&quot; assuming they&#x27;re using strong encryption.