3 ms·

Could it not have been just simple phishing? The low number of compromised passwords (20k according to the article) would make me think so at least.