Eurogamer obtained an email from the company to customers saying the site is "currently investigating a security issue" and is recommending folks to change their passwords.
The problems started when a hacker claimed he had the account details and posted them (since removed) on a file-sharing site. The details included customer names, dates of birth, email addresses, phone numbers and encrypted passwords.
Short version: If you're a VGP customer, change the password for any accounts that shared the same password.
[Pavel Ignatov via Shutterstock]