> running a script which tries every password This isn't directly applicable to your point, but I need to correct this. They weren't guessing tons of password

> running a script which tries every password This isn't directly applicable to your point, but I need to correct this. They weren't guessing tons of passwords, they were were trying one password on a large number of accounts.