This is not a “breach” the article hints at a trojan which scrapes or exfiltrates credentials off of user computers not a singular provider’s database.