The attack took place in November last year, so if you haven't changed your password since then, please do.