[sheetjs]

The email that was just sent out to MDN users seems to differ from this post. The email says:

> Your email address (but not password) was posted on that server for that 30 day time period.

There is no other mention of the word password or hash (encrypted or otherwise). However, the post says

> in the accidental disclosure of MDN email addresses of about 76,000 users and encrypted passwords of about 4,000 users on a publicly accessible server.

[groovecoder]

The emails are customized for each type of affected user.