To be very clear:
- There is not a new compromise.
- Recent alerts/notifications/postings/whatever on various sites (haveibeenpwned, BreachAlarm, etc.) are about the forum server compromise from 2015-07-01.
- The actual data/database recently got posted to a new site, which triggered the new notices/publicity.
- Right after it originally happened (2015-07-02), we changed the passwords of all affected accounts and sent those accounts an email explaining how to reset their password.
- More details can be found in our blog post about the incident: Security Notice: Forum User Password Resets
So, it’s not new news. That said, it’s always better to be safe when it comes to your online security. You’re welcome to change your account password again if you like (hopefully, you used a different password back when it was originally changed!) - as always, we encourage users to both use strong passwords and to never re-use passwords between different sites.
