Thanks for the heads-up, I've just changed my password

Edit - Duh, passwords weren't actually leaked - the ttackers queried Trello with email addresses and got back names, usernames and if the addresses were valid.