Were the compromised accounts sourced from Telegram or was that just the distribution channel? It's not 100% clear given your article and I feel like it's unfair to associate Telegram's name with the leak if they were merely a means of distribution.

I don't mean to trivialize the breach in any way mind you. I just want to ensure that those who don't read the full article aren't mislead into believing Telegram is any less secure because of this (assuming they weren't breached of course)