If you are using the action and were as of 10p ET last night I would assume everything is compromised, remove the action, and rotate secrets.