Obviously, time will tell if he had the full source code or not, but the fact they are not anticipating disruption speaks volumes IMO. PR talk is PR talk, but if the hacker did have the full source code, I wouldn't expect their message to be conveyed the way it has.