I think it's more like MongoHQ is compromised and consequently, circleci is affected than 'circle has been hacked'.