It's not clear whether the breach was contained and the extent of the damage... it's worrying news