Me too, and I've never attached an app to twitter. (I've got an account that I basically have signed into 3 or 4 times in 5 years). I'm curious why my username came up as being compromised, unless they're doing something sneaky about updating all passwords older than x yrs old.
edit: The attacker got salted password hashes. That explains it.
edit: The attacker got salted password hashes. That explains it.