And what about the users who had their accounts compromised in the past few weeks or so?
Many were trolls who lied, IMO.
A password hash does not allow you to login. The mysterious big account might have had a virus/key-logger on his PC.
It does if the password was weak and you brute force it.