The statement reads:
Apple takes security very seriously and iCloud was not compromised during this incident. Impacted users should change their Apple ID password as soon as possible and avoid using the same user name and password for multiple services. Any users who need additional help can contact AppleCare or visit their local Apple Retail Store.
Early on Tuesday morning, a number of Mac and iOS users awoke to "Find my iPhone" alerts indicating that their devices had been compromised and that a PayPal payment was needed to unlock their devices. As has been reported previously, users who set up a passcode before enabling "Find my iPhone" can unlock their devices with no problem.
If you'd like to disable "Find my iPhone" until the root cause of the problem is identified, we put up a handy guide on how to go about that along with information on how to set up a passcode should you try and turn the "Find my iPhone" feature back on after the fact.
And lastly, for the love of all that is holy, don't use the same login credentials across multiple web services!