I have a feeling--and I'm probably stating the obvious here--that a lot of hacked bitcointalk accounts have been sold outside of this forum, because I've seen numerous old-time accounts that suddenly woke up in October 2017, changed their writing style, and started posting in a typical bounty hunter fashion. Shitposts in the Altcoin Discussion section, mostly. I tagged a number of them one night after doing some "research" in that section.
This is definitely a good write up, OP. I don't know much about hacking so I won't criticize the security of the site--but it would appear to be pretty lax. But I'm sure a lot of that has to do with people not having strong passwords and so forth.