A post describing the security breach in more detail has been published on the Atlassian blog: http://blogs.atlassian.com/news/2010/04/oh_man_what_a_day_an_upda

A post describing the security breach in more detail has been published on the Atlassian blog: http://blogs.atlassian.com/news/2010/04/oh_man_what_a_day_an_update_on_our_security_breach.html http://blogs.atlassian.com/news/2010/04/oh_man_what_a_day_an... Looks like they were storing the passwords of older accounts in clear-text (see 'Lessons we've learned today').