A SQL injection exploit has provided hackers the ability to extract usernames and password hashes from MySQL.com this last weekend. From there, the extracted usernames and password hashes were posted to pastebin.com where most anyone could easily decipher the password hashes against dictionary matches. Claiming responsibility for the hack are grey-hat hackers TinKode and Ne0h of Slacker.Ro.