[seanflyon]

With such a large group compromised at the same time I would guess it was not phishing.

[gress]

The group wasn't large, and there is no evidence they were compromised at the same time.