Payouts below expected difficulty are sometimes normal as pool luck can go up and down. Know your payout system.
Maybe I should have quoted the previous new that talked about luck.
Here it is. I am aware of the effects of luck on payouts.
5/25/13 - Pool Luck
As many of you have noticed the pool luck has been very bad the past 2-3 days and payouts therefore have suffered. We went from finding normally 80-90 blocks a day to finding 56 one day and in the 60's another. As your payouts are 100% based on the number of blocks we find, you will have most likely noticed lower payouts than normal.
While bad luck is possible we started to suspect other issues and worked with one of the litecoin devs to try to get to the bottom of why we werent finding the correct amount of blocks and see if it was just bad luck or other issues. We looked at many possible vectors of attack and diagnosed our connection to the litecoin network, latency of getting work, etc. We have identified a few possible vectors of attack and a few possible network issues and took steps to make changes to block these and improve the latter. Since making those changes we found 10 blocks in about an hour and luck drastically improved.
We will not be describing the possible attack vectors for obvious reasons as they are not well known or common and we cant confirm any of these vectors even were being exploited. What we do know is that things seem to be resolved and now that we are fiding the correct amount of blocks we expect payouts to go back to normal. We encourage all users to track blocks found on the block chain, every block can be traced back to the pool or person who mined it, we will be changing the pool mining address every 2 weeks starting tomorrow (this changes nothing for you, just makes it easier to check pool blocks found on the block explorer) to aid users in this process. Thank you for all of our dedicated miners who have weathered this issue and realize the value in our pool. We have worked non stop on this for the past 30 hours to work this out and will continue to monitor it closely.
Notice the use of the phrase ...attack vectors... .