WPENGINE Customer Credentials Exposed

Just got this in my inbox : At WP Engine we are committed to providing robust security. We are writing today to let you know that we learned of an exposure involving some of our customers’ credentials. Out of an abundance of caution, we are proactively taking security measures across our entire customer base. We have begun an investigation, however there is immediate action we are taking. Additionally, there is action that requires your immediate attention. While we have no evidence that the information was used inappropriately, as a precaution, we are invalidating the following five passwords associated with your WP Engine account. This means you will need to reset each of them. Instructions for how to reset these passwords are at the bottom of this email. WP Engine User Portal WordPress Database SFTP Original WP-Admin Account Password Protected Installs and Transferable Installs As a security best practice we also recommend, if you use this password elsewhere with other applications, that you change and update those passwords as well. We apologize for any inconvenience this event may have caused. We are taking this exposure as an opportunity to review and enhance our security, and remain committed to strong internal security practices and processes. We take the security of our customers very seriously. Should you have any questions after resetting your User Portal password, please feel free to contact the WP Engine support team or simply reply to this email. You may also obtain more information about this event by visiting http://wpengine.com/infosec Sincerely, The WP Engine Team