general public: Please change your passwords immediately for this site and any website that used the same password.

dafont.com developers: please update/strengthen your password hashing methods. MD5 encryption has been basically insecure since 1996, largely due to users creating very short passwords that can be deduced with some brute-force dictionary attacks or mathematical collision detection on the hashed values. The original author of the MD5 password hash algorithm has publicly declared his software end-of-life in 2012 and is "no longer considered safe" to use on commercial websites. (http://www.zdnet.com/article/md5-password-scrambler-no-longer-safe/)

original posted article on the breach:
http://www.zdnet.com/article/font-sharing-site-dafont-hacked-thousands-of-accounts-stolen/

:<