Comment by markild

I think the implication here is that people might have signed up with the same username and password as they use for other things (e.g., their work email).