I just received this notice too.

Why are they sending our hashed passwords to a usage tracking platform O_o

This is really REALLY BAD.

What other data did the attackers get other than the email?