[Phil^]

This should really go in announcements along with any official comments from pateam and recommendations for those whos passwords were infact compromised - ie change them.
If they used the same login for external sites as they did for P, then it stands to reason that things such as game logins or other more sensitive sites use the same details too.
It might also be an idea to personally contact each and every one of them incase they dont read announcements or the forums too, explaining the situation and what they should do.

Personally, I think what was done is a disgrace - irrespective of how he got the information, such a person has no place in a position of authority if they cannot be trusted. Thats something for netgamers to decide on though - not anyone else. Its entirely an internal matter to them, which judging from the announcement has been dealt with.

The question becomes - if he did not use his administrative access to gain these logins - how did he get them?

I wonder which jurisdiction this would fall under where data protection or computer misuse laws are concerned though. Some countries take things like this extremely seriously.
Could be some potentially nasty fallout if anyone presses the matter :S