People do stupid thins on the internet and re use the same passwords over and over and over again. People aren’t “hacked” so to speak, they are phished or click on things  they shouldn’t.