WordPress Announces Security Incident

According to a post on WordPress’ blog, Automattic [which runs the WordPress blogs] had a low-level (root) break-in to several of our servers, and potentially anything on those servers could have been revealed.