The denominator is "Microsoft corporate email accounts." I interpret that as email accounts of the Microsoft organization (management, employees, and so on), but not customers.

It's pretty embarrassing and not very reassuring that they themselves got owned, but they wanted to tell their customers that they didn't.