It is encrypted. Since the attack used brute force to break their 2FA somehow, they could likely use the same to guess the master password as well. Its a short read so check the article as well.