We now restored the server without changing user passwords as there was no evidence that the server attacker compromised any other information. If you are concerned, please change your password yourself.

Sorry for your inconveniences!