I'm glad this is news, because it means I was probably affected by a mistake and not a specific attack. Nonetheless you can't go spooking your users like this.