Read the blog; and read the initial reports.
Here:
http://krebsonsecurity.com/2014/01/a-fir...
And here:
http://krebsonsecurity.com/2013/12/sourc...
But note others in between...

Krebs is someone whom data security professionals look to. (Just sayin'..._