Now it seems the breach has extended beyond kernel.org. On September 8 a new breach was discovered across The Linux Foundationâ€˜s group of sites. That includes LinuxFoundation.com and Linux.com, and any subdomains those sites run.
Hope you didn’t use the same password there for other sites. If you did, you better change them.