The Syrian Electronic Army has now [reportedly] stollen 1 million user credentials from Forbes.com. 

Re/code (link) saw multiple tweets where the SEA took responsibility and published various screenshots as proof. Forbes has confirmed the compromise, they are recommending users change their password and they are implementing additional phishing controls (which is likely how they were compromised in the first place).