So, now that mastodon.social has made this issue public I can disclose that awoo.space had the same misconfiguration issue. If you exported your data it might've been leaked. I'm not sure how long it's been configured that way but it must've been since before I was the admin.
https://status.mastodon.social/clfbpfo8q3523hvoc4dsjl2v3