Given they state that some accounts were compromised by stolen passwords from "other websites," it would make sense to run some sort of dictionary attack using

Given they state that some accounts were compromised by stolen passwords from "other websites," it would make sense to run some sort of dictionary attack using lists from those sites.