Want to say that this did NOT happen to me. I have 2FA (yubikey), is it possible the attackers knew who had 2FA and who did not? I did have assets in my mtgox acct.
That may be a possibility. I did not have a 2-factor active myself. But now I do. Downloaded Google Authenticator as soon as I managed to get back into my account. It was 24 horrible hours to wait for the PW-reset timer to reset so I could get back in.
Thankfully I did not have much money on my account, but still not fun to experience. At least my few dollars I had there were not touched. All good so far.