OSM Account Database Compromised?

Does OSM know if their accounts database has been stolen/compromised?

The reason I ask is that I have just received one of those bitcoin extortion scam emails. Surprisingly, the email address and password pair that they knew was only linked to my account at OSM. I have certainly changed both of these now, but I would like to know if OSM already knew of such a compromise or if they need to look into it.


you may use https://sec.hpi.de/ilc/search to check your mail addresses (german, but very good.)

Or try https://haveibeenpwned.com/ https://haveibeenpwned.com/Passwords but yesterday this tools did not contain the newest hacks.

see: https://www.heise.de/security/meldung/Neue-Passwort-Leaks-Insgesamt-2-2-Milliarden-Accounts-betroffen-4287538.html (german, but you may translate it via https://www.deepl.com/translator )