It could have been worse, fortunately. The attacker broke into a Twitter admin's Yahoo account, and used that information to gain access to the Twitter admin CP. Very little was compromised. You can see screenshots of the Control Panel here:
http://www.businessinsider.com/what-twitter-looks-like-for-t...