I got a seemingly genuine email from Gawker entitled, "Gawker Comment Accounts Compromised -- Important"
Although I don't believe my email address was in the dump.
Although I don't believe my email address was in the dump.
I thought is was strange they used a URL shortener with an uncommon TLD (.kr) to point to the FAQ lifehacker. Seems you'd want to be as unsuspicious as possible in this situation.
I didn't find it myself with grep, but I did find it using this utility: http://news.ycombinator.com/item?id=1999373