The breach notice indicates that hashed passwords were compromised but doesn't mention whether a salt was used when computing the hashes.

Use of a salt makes all the difference, guarding against the use of rainbow tables to look up precomputed hashes of common passwords.