Zendesk says access occurred in 2016 and that only a small percentage of customers were impacted.
Source: Threadpost