>From the incident report[1]:

"If you are a user of the Apache hosted JIRA, Bugzilla, or Confluence,
a hashed copy of your password has been compromised."

Thanks,
--tim

[1] - https://blogs.apache.org/infra/entry/apache_org_04_09_2010