Google has done a great job of spinning this as "unexploited". The reality of it is (if you take them at their word and believe they only kept 2 weeks of logs "because privacy", which is suspicious for a company that thrives on data collection), they have no idea whether or not it was exploited.