I think it was a man-in-the-middle attack, so everything during the transaction was stolen.