I mean, just three days ago we had this incident, which is probably what they are referring to: https://blog.1password.com/okta-incident/

Anyway, iirc, 1password is architected in a way where a breach won’t actually disclose the passwords of their users, but I’m too tired to do the requisite double-checking to verify it