I remember someone on hacker news saying they were able to dump the whole database from their server, I cannot know if that s true but I don't think everybody panicked for nothing