The attackers who compromised Web hosting provider Linode used a zero day vulnerability in Adobe ColdFusion and were able to access the company's database, source code and customers' credit card numbers and passwords. The company said that the customer credit card numbers were encrypted, as were the passwords, but it forced a system-wide password reset after the attack was discovered.
Source: Linode Hacked Through ColdFusion Zero Day (http://threatpost.com/linode-hacked-through-coldfusion-zero-day-041613/)