It seems like the Keys of one of the issuers got leaked, not the root keys so it looks like the fallout might be confined the the people who got their cert from that issuer (seems to be a french one). Or am I missing something?