They've confirmed via Twitter this happened. If a company has a serious security breach requiring them to take their entire fleet of servers offline, I'd say it's prime time for advertising a competitor.
Yes, they did. But as I said, they didn't given much detail. But they did say that only a few emails were disclosed. If you call that "serious", then OK, but it could be much worse. The competitor is just profiting from something no one has any real information about and is basing himself on an email sent by a hacker: great!