The public disclosure post is located here:
https://adafruit.com/march2022disclosure
Adafruit is advising customers of a security incident through the bulletin. I realize the company is a competitor of our sponsor but I suspect some of our members may use the vendor from time to time. As a former IT security professional, I take these notices seriously and ignore professional boundaries to make people aware.
I suspect this will get posted in the wrong forum. I'm still trying to navigate the site labyrinth to find myself in the proper place. My apologies.