They manage to hack loads of different accounts. On ebay last week when I was looking for a D700, Cash converters (a several thousand powerseller) had loads listed up for £1200 brand new. Obviuosly a fake listing, as in the listing it said email this address for details how to buy. For a laugh I did and got an email back asking for all my bank detaiils, address, name, eye colour, waist size etc. Not long after all the listings got pulled.
The next day, another powerseller had hundreds of the same thing, again with the same text in the listing. I emailed the real account holder to let them know, and they had no idea how thier account got hacked.