In theory this same attack could be used on any Pleroma based instance. It's not your password that was breached, it would be your DMs and the references to the images within those DMs and the email addresses, primarily. It does not appear that there was any database breach. It's good to change your password just in case though.