yes, the matrix.org homeserver was compromised. see https://matrix.org/blog/2019/05/08/post-mortem-and-remediati... for the details and what we did about it to prevent a repeat performance.

The protocol itself, the implementations, and the rest of the Matrix network was unaffected.