We've had two incidences of spam posts here by what could be compromised accounts. I'm not aware of any breaches of the HFU member info, often these spammers take use of the fact that many people use the same username/password on multiple sites, so when they get a set of compromised account info, they try it on lots of other sites.
I'd strongly suggest users change their passwords here, just to be safe.