[Touche]

that doesn't answer my questions, why do the stolen passwords work, why aren't they just sending password reset emails?