Your direct account was accessed or some of your information was access through a compromised account? those are big differences and from what I've read only the latter should have been possible. and in my opinion, not such a big deal.