The compromise was bigger than initially thought, and it seems some accounts were broken into even before that.