I've reported the site to Google, I hope they really do something about this.

That could have explained accounts that recently had their passwords changed.