They found an outgoing stream from one of their servers that they couldn't identify, but no evidence evidence that it was anything more than that.  To their credit, they disclosed that promptly & recommended folks change their master passwords just in case.