Whoops; email password leaked. No evidence that it was used.

Also, it looks like Dreamhost doesn't keep copies of messages sent
from the app, so I don't believe any password reset links leaked,
either. Worst-case scenario, someone might've sent emails as
errors@openneo.net, but I think I would have heard about that :P