It's not a direct hack on Nintendo Network. Months ago hackers leaked a large user list from Nugget Bridge, a website where competitive Pokémon (VGC) players gather (or gathered, the website has been quite inactive since the hack). Someone decided to test the usernames and passwords on Nintendo Network, I guess these 450 are the ones who worked. If you examine the list will notice a lot of the compromised users end in "VGC".
The leaker commented
here explaining better what happened.
The lesson here is, don't use the same user and the same password for different sites.