[richbell]

Given the wording of "any and all secrets" I would not take any chances.

[chrisntb]

"Immediately rotate any and all secrets stored in CircleCI. These may be stored in project environment variables or in contexts."

The blog post calls out "environment variables" and "contexts"

[richbell]

Emphasis on may be; not to mention, they are actively investigating the breach and do not have all the information at this time.