This morning I got an e-mail from Dreamhost:

We’re still working to determine how this occurred, but it appears that a 3rd party found a way to obtain the password information associated with approximately 3,500 separate FTP accounts and has used that information to append data to the index files of customer sites using automated scripts (primarily for search engine optimization purposes).

It doesn’t appear that they did anything to BlogNomic, but it was recommended that we change the FTP password, so I did.

I don’t know who has FTP/shell access these days, but if you have it, PM me or IM me the old password and I’ll send you the new password. (IM info in my profile.)