Maybe another account password was hacked and they used the same password for Twitter. Or their password was really bad, like "123456" or "password".