neither...
there was a vague twitter post when the site was put into maintenance mode. Stating:
"Security issue, investigating" - March 16th @ 1:57pm
The site's been down since right before that...
on March 17th "2014-03-17 15:39:36" (site down still) the outbound transfers happened. So, no access to the outside world unless hacked or stolen by admin.