Here is the post.
http://us.blizzard.com/en-us/securityupdate.htmlBasically someone got ahold of the database but not financial information was stolen. People complained about their accounts being hacked. They said someone would join their game then leave then they would be hacked. Do you think that someone was finding a player, checking their name in the hacked database, unencrypted their password, then stole all the loot?