They could have at one point been hacked if weak passwords were used.
Data breaches will eventually push out the most weakly-secured accounts. I'm willing to bet that what's happened is that we're seeing various Newbie accounts reactivate due to their low barrier of entry.
Higher-ranked accounts were most likely cracked earlier due to their value and (expected) higher security.