All funds marked as "pending" are funds affected by the attack. Yes, pending escrow is incorporated into this.