This could still be related to the bitcointalk hack back in 2015. Some of the accounts could be dormant accounts that weren't on in awhile so they couldn't change their password.