[chrisntb]

"Immediately rotate any and all secrets stored in CircleCI. These may be stored in project environment variables or in contexts."

The blog post calls out "environment variables" and "contexts"

[richbell]

Emphasis on may be; not to mention, they are actively investigating the breach and do not have all the information at this time.