It's the primes p and q which were supposed to be hard to find.
Except when they're simply leaked by someone claiming to be an insider because their supervisor ignored an issue with one of their certificate authorities. He's done the kindness of providing them in relation to a constant variable between them so it is a provable leak, without exposing the actual full values, and he explained how anyone could obtain them because of a zero day he found in numerous servers built on the same hardware.
I'm just reposting what he gave me.
He also gave me keys for a bunch of other big companies and even bigger organizations, but I declined to share those because of the legal problems and I thought this might be sufficient to get someone at google to check for themselves before the full story drops.