WarcraftRealms.com

All,

I use unique passwords for each website. I received an email earlier today with the password to this website listed. Just some kid demanding money in bitcoin. Anyways, everyone on this site needs to update their passwords. MODS if you are reading this, please consider forcing everyone to change their password. You also need to find out how the leak occurred.

-Topknot

This site has never been secure for data transmission..
note we don't have https.
Which means anyone in the internet chain between you and this site can see every bit of data that passes by,

One of the reasons, I always tell everyone.. use a unique password for every site they ever log into.

On the other hand... the actual server side and database is behind security, so it is less likely that part has been breached.

Having said that, I will pass on your message to Metalbeast the site owner.

I've gotten I think four of those emails with my password for this site.

May I recommend:
https://letsencrypt.org/

They issue free SSL certificates. Granted, the 90 expiration is a little annoying, but the price is right.