Correct. The passwords are not breached in any way. It's the metadata that is the leak, and that alone can be enough to compromise accounts.