The Drupal.org security team says it has discovered unauthorised access to Drupal.org and groups.drupal.org account information which has exposed user names, country, and email addresses along with hashed passwords.
No credit card information was stored on the servers, but the investigation is ongoing and the team says it "may learn about other types of information compromised".

The link for this article located at H Security is no longer available.