The big disappointment is how long it took them to acknowledge the issue. I was freaking out thinking my gmail account had been compromised. Was up into the wee hours of the morning trying to scrape log-files from my Android devices trying to figure out which one was leaking, since Google said nothing else was connected to my account.

I found out because somebody on Steam forums linked me to a Reddit thread on the subject.

Yeah, this is one of those "let the users know ASAP!" things.