Mar 06, 2012 17:36
I have an email account on my own server solely for this LiveJournal (but not published as my profile address, only LiveJournal sees it). It used the same password I used on this site. I am reasonably certain I have not used this email address and that password anywhere else, nor have I logged into LJ over insecure links (for at least two years).
The email account got broken into. I suspect the only way that could have happened was through a deep compromise of LJ as the password was not a real word. I'm sure we'll find out soon enough if that's the case.