DMs and @mentions will now be redirected to the new account until the original user is able to send the change of username notification. There's now a chance, however slim, that a private message will arrive at the wrong person as a result of Twitter's actions.
I'm ignoring the question of whether Twitter should be a medium for private communications.