AOL said it is investigating a large scale breach of AOL Mail in which "a significant number" of accounts were compromised.
User information including encrypted passwords, encrypted answers to security questions, postal addresses, and address book contacts were compromised, the company said in a blog post.
However, AOL said that no users' financial information has been stolen and there is no indication that the encryption on passwords or answers to security questions was broken.
...Although there is no indication that the encryption on the passwords or answers to security questions was broken, as a precautionary measure, we nevertheless strongly encourage our users and employees to reset their passwords used for any AOL service and, when doing so, also to change their security question and answer.