From their announcement post, it sounds like the passwords were adequately hashed, so the only accounts compromised were likely those with very weak passwords.

Perhaps the DDOS attack is merely a way to distract Linode from finding the compromised accounts.