There's been multiple huge breaches in other services, lately - not just gaming, social media, etc. Anyone who dupes passwords is vulnerable atm, if they're not running 2FA.
If you dupe passwords and you see a run on account theft like this, immediately change all of your security credentials.