While the security implications are potentially huge, I find the announcement is missing
important informations : how were they compromised ? how could it happen in the first place ?
Also, they didn't announce the compromise in one week, why ? They could have said they were
compromised and that they were invastigating it.
All in all I think there is too little information disclosed and I hope they will disclose
more details soon.