http://www.nbcnews.com/tech/security/time-warner-warns-custo...
"In a statement provided to NBC News, the cable giant said "there are no indications that TWC's systems were breached," and suggested the mails may have been acquired earlier by other means, such as malware, phishing attacks on subscribers or security breaches at companies that stored TWC customer information."
So seems like it was just phishing and malware to the unlucky ones.