Get James Bond in here: 13 million account passwords plundered from 000webhost

Unencrypted logins leaked through unpatched PHP hole

Hackers have made off with the names, email addresses, and unencrypted passwords of 13 million accounts at 000webhost, a free web hosting biz."