It's a little unclear to me how recent this was. If I changed my passwords like a few weeks ago am I fine? They mention the investigation has been since the start of the year so I assume the password leak was from before that?