Tumblr stressed that there is no evidence the security bug was being abused or that unprotected account data was accessed.
Source: Threadpost