Yes, most likely the password used a common word or something else similar susceptible to being brute-forced.