Since several of the people involved habituate #openacs it never dawned on me (or anyone else) that the word hadn't gotten out ... sorry about that.
We were focused on server issues, like strategizing to move openacs.org off to another server so we can rebuild openacs.org's real server with a clean and known Linux install, etc and I know the folks whose server had been cracked were also really busy undoing the harm.