They're taking their time on sending out E-mails. Also, when I went to the site yesterday afternoon (eastern US) there was no notice about the hack on their site anywhere to be found.
This slowness of notifying people is
bad. Good thing the press has done a lot of it for them.
Some are speculating that their password reset system can't handle the load, because it was timing out on people by evening time.