A 1 year old backup of the user datbase was open to the internet for nearly a year, compromising over 200,000 accounts, including email addresses, passwords, dates of birth, etc. If you have a thingiverse account, you should at least change your password.