That was the initial attack vector. But it looks like there has been a lot of lateral movement in that hack. I don't think a single user account would have had access to that much information and if it did that's part of the reason for the hack too, not just the initial breach method.