I doubt it was a social of educause (the edu registrar); more likely some credentials specific to MIT were compromised.