This attack should not be unexpected. Steemit is making tremendous progress and therefore will catch the attention of all manners of persons.
The lesson from this attack is the obvious need to always step up security as much as possible. Nothing must happen to steemit.