The anti-malware software firm's CEO Vince Steckler said in a blog post that Avast has no idea how the breach occurred, but reassured users that only 0.2 percent, or 400,000, of the 200 million forum members were affected, and no payment, license, or financial systems or other data was compromised.