Hacker News Reader

I posted this already. To answer your question: The email clearly reads "We were not hacked"

I still wonder how they discovered that the passwords were exposed.

Got informed by a user of a weakness in web interface AFAIK