It was a vBulletin account that was compromised.