They got private messages and password hashes and whatnot. And the article mentions "SQL Injection".

So gab was hacked, not scraped, unlike parler which was scraped.