Private keys apparently fell into the wrong hands, allowing attackers to issue valid TLS certificates for any domain.