I don’t know how secure the info at tos base are, but if you use the same combination of e-mail/username and password for other sites and games you should change your password for those.
Just gonna leave that here, it seems like the passwords are encrypted so they should be fine, but it’s always a safe bet to change your passwords.
The hackers pretty much can make a copy of the DB and crack it later on, but like you said, changing the password is the best procedure right now.
better safe than sorry, right?
I finally found a new password for my stuff now that this has happened
and I didn’t even get an email… just paranoid. Now I just gotta get the habit out of typing my old password 
Third Party websites should always be tread with caution, and never use the same info as the game. Problem is ToS is new, fresh, and with a very large fan base. I Don’t doubt this won’t happen again and to many other sites.
thanks for the warning dude!
I pity the fool who doesn’t use different passwords for everything.
thanks for the infomations 
