Possible Jenkins Project Infrastructure Compromise

Does anybody known whether they disclosed how sensitive was the information that they the intruder could have gotten hold of -- especially the passwords, were they stored XOR'd or encrypted+salted?