Salesforce accidentally gave "modify all" (full permissions) to all users in organizations using the Pardot marketing tool

This is hard to understand, but seems to be a massive issue.

I've linked to the official status page, but for more information there's also:

• A big thread on reddit in /r/salesforce
• Discussion on HN

Summary of some status calls that Salesforce has been doing, from a reddit comment:

1. They're very sorry
2. 9:56 UTC the SF tech team detected that they messed up
3. Affects only orgs that have or ever had Pardot
4. Doesn't affect government, AP(?) or UN customers
5. Does affect NA or EU although only if on an instance shared by #3
6. 32 instances are currently still disrupted, mostly sandboxes
7. Instances should be coming up shortly
8. Non-pardot customers should be 100% fine once they come up
9. Pardot customers may come up soon but it will be kind of fubar
10. No evidence of unauthorized or compromised data

Apparently somehow they also managed to push it into all their backups and everything too, I don't even know how something like that would happen:

There is a disaster recovery backup, however this update was pushed to that as well. Therefore, unable to fallback, and there may be data loss. Cannot confirm data loss probability or time/date of recovery.