Database dump files containing email addresses and passwords of around 97,000 users of the test build were posted on a publicly accessible server. Landfill.bugzilla.org users will be required to set a new password the next time they access the test Bugzilla systems. The database dump files were removed from the server immediately, and weve modified the testing process to not require database dumps. We are deeply sorry for any inconvenience or concern this incident may cause you. We’ve sent notices to users who were affected and recommended that they change any similar passwords they may be using.”]
Source: https://bugzillaupdate.wordpress.com/2014/08/27/landfill-bugzilla-org-disclosure/