I've recieved an e-mail from ubuntuforums.org a couple of hours ago:
[...] the attacker has gained access to read your username, email address and an encrypted copy of your password from the forum database.
If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts [...]
For me that piece of text sounds like:
We do not use salts, and we use MD5 to hash passwords, so you should change your password everywhere on the net because a lot of services do the same "hashing method".
So, the question (compared to "We use strong password encryption methods with salts and such, so here's your one-time login, you will be asked to change your password upon signin, no need to change your passwords everywhere") is: do that kind of reaction from a compromised service tells you about how bad their security is?