In March 2012, Linode acknowledged it was a breach of their internal systems, not the customers'.

Today, they are reseting the password of all customers, making it pretty certain this is another breach at the Linode level, not at the customer's level.