Hacker News Reader

Yes.

Also all traffic you sent through (meaning a lot of passwords) could have been sent somewhere.

This is an important point. Change your passwords on all your accounts (after patching up that hole first, of course).

Good luck!