I doubt any of us are in trouble. Unless we use the same usernames as well in other sites, then I don't see how this asshole can have the resources to brute force for usernames that could match thousands of passwords in hundreds of different websites. The odds are just too great, so don't even bother.