Ok folks, my own independent research uncovered the following:
When hackers hack a website (ex: twitter, electronics forum, Sony, Experian, etc.) they either sell the account info (incl. password) on the black market or they post it publicly (on a paste site like pastebin.com usually) to gloat...