Not anything special; it makes sense for a breach to occur when someone's password leaked... what's more interesting is they also abused some left-over access tokens according to other reports
And they are git repositories, so it makes no difference. Apparently all they did was move HEAD, which you can move back; and the repo is distributed anyway so there should be multiple copies.