I wonder if "500M" is a silly way of saying all user account details were stolen.