What do we know that the "hacker" achieved? Was it physical access to the datacenter at the VPS he chose or was it... some "Linux malware virus"? What did they

What do we know that the "hacker" achieved? Was it physical access to the datacenter at the VPS he chose or was it... some "Linux malware virus"? What did they get? His PGP keys were his Bitcoin private keys? His passphrase? They were just a file laying around on his VPS machine?