People have made scare posts like this before. In reality this is not an issue, since the public keys in the key server are not the actual public key the user pushed. Due to random factors (cosmic rays, bad memory controllers) at some point in the many copy operations required to send packets to the Internet, the data was silently corrupted and the result was a weak PGP key. If you actually email the users, I guarantee they'll tell you that isn't their real public key.
word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word