I think Theymos or someone who has a real gasp about the problem should post an example of a made for purpose account so the average joe can understand the extend of the problem.
It's been a while last I logged, and only saw this on reddit yesterday and servers were still down.
A suggestion to those who's emails are important make sure to use double authentification.
I don't think we know it yet. Even if Theymos knows what all they took, we dont know what will be broken or timeline. He did send a nice email about it though showing I think worst case scenario of what it all could be. And I'm sure they are looking more into it as he mentioned a forensic backup. That allows them to keep looking at problem.