I think it has since been stated in public, but yes. That. The code that ran the IJDb was written for a much less hostile internet, and it had several security issues that were just too big to fix.
Unfortunately we didn't manage "before there was any major security breach" as we had evidence that someone had been using sql injection to systematically dump the entire database and had managed to decrypt a number of passwords.
They announced the hack publicly, although due to their timing I don't think many people believed it: https://groups.google.com/forum/#!msg/rec.juggling/g8OHsBoFd4o/0umQP714PKgJ
I'm sure there was an announcement to IJDb users that they should change their passwords, not reuse password etc - but I can't find it in 30 seconds worth of googling.
So yeah. It had to go.
by Little Paul, in response to this post 2015-11-04 15:50:43