Hacker News Reader

The leaked credentials of an employee at a tweet scheduling service theory sounds more plausible to me on the face of it.

Wouldn't Twitter have locked the affected accounts by now then?

As of your post it would seem to be a 20-30 minute response time. Happening fast it seems.