Jason has blogged about a WordPress security issue which allows people to get the emails of all posters and event people who leave comments. Disabling public registration seems to fix it but see Jason’s blog for more.