[hackuser]

How did the attackers know that Brennan had an AOL address?

Let's not take the attackers at face value. They could have had help or be employed by anyone, including those either interested in Brennan's AOL email or in embarassing him.

[Titanous]

The article says they got the AOL address from Verizon via pretexting.