Yes it was done by 51% attack. The chain split into ETH and ETC.
Not every chain split is a 51% attack.
alt Hacker News
Not every chain split is a 51% attack.