His password was "santabarbara"
About 19,600,000 results (on google search) for "santabarbara"
Maybe someone has Rainbow table and a bot setup so whenever a new account is created that exists in hackers database, the money is transferred automatically.
Oh, sorry, I thought
the question was his passphrase

Still, 12 symbols are so easily cracked? That's some serious brute-forcing...
Maybe some bitcoin miners repurposed their GPUs?
