How was the key compromised?

Did someone breach Facebook to steal it, or did Facebook employees post it somewhere?

Curious to learn more details. Probably again much worse then initially being reported on.