Worth noting this has nothing to do with any official Android website, nor is it in any way related to google. It's just a community website made by android fans for android fans.
What's to be learned from this?<p>Server setting needed hardening?<p>Software needed updating and was vulnerable?<p>vBulletin is a well used and documented lice of code. I'd love to know what the security experts here think.
In all fairness, they appear to have handled this incredibly well and have been very informative. Which is much more than can be said for the breaches in most other cases. And at least the passwords were hashed (although how well, they don't really say -- I guess that would be part of the vBulletin package?)