Due to a misconfiguration, our outbound SMTP credentials were compromised. After an investigation, I was able to determine how this was done and correct the issue.

There is no evidence that the attacker was able to compromise user accounts, so you do not need to do anything. What this does mean is that outbound emails will not be working today, but should resume working by tomorrow. This means no email notifications and no password resets.

I apologize for any inconvenience this may cause.