Did you tell them?

EDIT: I did https://github.com/tip4commit/tip4commit/issues/147

I'm sure he sent them a notification about their new account on his website on which, if they create an account, they may or may not find information of value to them.

Thank you very much! I am quite surprised because I remember fixing this issue in the same day patch became available and I run update recently. Upgrading the distro, hopefully it fixes the problem.

Upgrading the distro is likely insufficient, as your private key has potentially (likely, at this point) been compromised. At a minimum you need a new key and cert.