Here is what's wrong with the "i was hacked" story.

If somebody gets your pass and logs in to your account, you don't get a warning email as far as I know.

So there is absolutely no reason to change the original owner's password.