Curious though that they claim in the same email that "This incident did NOT involve any credit card, bank account, social security or tax ID numbers"
How can that be eLance? Even if you have identified THIS breach, you security is obviously lacking and it's doubtful this is your only security hole. More likely it's your only known security hole.
