this mass comeback is really strange.
maybe somebody found an old dump with PWs and all the old are used now.
Even if someone has a copy of the forum's database, it will be useless since paswords are saved after many rounds of sha256 hashing unless the hacker used brute force to find weak passwords.