I didn't think it was a hack when I first heard about this, but now I think it was a hack/brute force of an ancient private key and/or wallet.dat file that was password protected.