Yes, we use a Pleroma backend. I'm combing through things right now just to make sure we were not affected to the best of my ability. I won't really know exactly 100 percent what went on until the admins who were affected complete their investigation. Regardless, it's best practices to never ever use fediverse DMs for anything that could be compromising. Use something more secure, like Matrix, XMPP or Telegram (don't use Telegram) or literally anything else. Carrier pigeon is preferable to fediverse DMs.