If you get an email let’s say sometime after this post goes up, let me know. I think I got the problem solved… seems like in terms of your actual passwords you should be okay (most likely possibility is that something harvested usernames from the forum here and put them into the “lost password” form over and over again). Looks like it was more of a “let’s see if I can cripple TextFugu servers” sort of thing.
I’m continuing to talk with people who know more about security, though, and will hopefully come up with better solutions to preventing this in the future…