The title is a bit misleading. I don't see any evidence of a hack. Just because a vulnerability was discovered doesn't mean it was used to compromise accounts. It is possible, but it was always possible with or without this vulnerability being disclosed now. If it did occur, this may not have even been the method used.