Even though the password are encrypted with salts, CricFire users are advised to change their passwords if they used the same password elsewhere.
At the time of writing this article, CricFire has not display any notification about the security breach.