It's not troubling, seems more like they just got access to a couple of the web servers, which aren't going to contain any "sensitive information"