When the devices you manufacture are cloud-managed, the last thing you want is for your customers’ login credentials to be breached. The second to last thing you want is to lie about the breach.
As the article notes,” If you have Ubiquiti devices installed and haven’t changed the passwords on the devices since Jan. 11 this year, now would be a good time to take care of that..”