I just received this notice too.

This is really REALLY BAD.

What other data did the attackers get other than the email?

Why are they sending our hashed passwords to a usage tracking platform O_o