They got hacked about a month ago and have been extremely cagey about what exactly was hacked ever since.

Turns out the master database with encrypted username/passwords got leaked and encrypted environment variables were also leaked but it was like pulling teeth to get them to answer whether or not these happened or even admit that it might have been possible. Presumably more than this was also leaked but so far they haven't said anything on that. Env vars were the biggest concern on everyone's mind.

They gave the absolute least amount of information over the longest period they could muster.

The problem wasn't the hack really, it was the lack of transparency in the response.

See: https://twitter.com/jacobian/status/1522782890957819906