It's possible than when the site does come back online, the attackers could quickly log in as some of us, change our bitcoin address to be theirs, lower our payment thresholds and steal our confirmed coins...
Or am I being paranoid...
IIRC, changing paiment adress need to be confirmed by email, so if your email password is'nt compromised, no problem at all here !