In reply to Adam.

That would only work if it were a brute force attempt. I don't think there has been any hint that may have occurred here, just that a weak password was at fault.