The article isn't clear whether they self reported or were made aware. The affidavit mentioned someone reported they had accessed the passwords multiple times before it was taken down. Seems to me someone reported it to the GOP.