CCA has connections with CBM hosting. He was allowed access to obtain anyone's key.dat file that was using the hosting service and using some well-known techniques, extracted the keys from them.
Your keys are not in danger unless you used CBM hosting. If you did, go get your money back.