The article is about a marketing data breach, not passwords.
I understand, just making a general comment.
And it's not unheard of that infections metastize, whether into developer accounts, product code... Probabilistically, this was a shot on goal.
I apologize for the mixed metaphors.
From a marketing perspective, a data breach of any kind looks horrible for a company whose entire job is keeping secrets safe.