On Thu, Oct 3, 2013 at 10:06 AM, Risker <risker.wp@gmail.com> wrote:

Please note that it is especially important to change your passwords on the Wikimania wikis where you have accounts.  These are non-SUL wikis and changing your SUL password will not effect a change on the Wikimania 2013 and 2014 wikis.  Even if you never intend to edit those wikis again, your password and account could still hypothetically be compromised.

wikimania2013.wikimedia.org and wikimania2014.wikimedia.org are both part of SUL, so most users should use their CentralAuth account to login. They are slightly odd in that we don't give you a cookie for those sites when you initially login on another wiki, but with SUL2, you *should* get logged in when you visit the site.

However, since SUL2 is relatively new, and you wouldn't get automatically logged in when visiting the site with the original SUL, I'm guessing many users visited the wikimania sites for the first time, logged in with their centralauth username and password, and continued on their way, which is one of the conditions where the local wiki stores the password hash used to initially create the account. So there is probably a higher number of users here who were notified, than on some of the other wikis.