Here’s the Postmortem from the Matrix.org security incidents last month. Very well written. I give this one a 9/10.
tl;dr – be very careful with your ssh infrastructure.
I’ve been a Matrix supporter for a long time, and while this incident was concerning I am quite happy with the transparency and focus that they put into this response.