Are both of these sites (LinkedIn, eHarmony) really assuming that only the hashes posted to the forum thread have been compromised? Isn't that, well, a really r

Are both of these sites (LinkedIn, eHarmony) really assuming that only the hashes posted to the forum thread have been compromised? Isn't that, well, a really really bad assumption?