The account was allegedly breached through the Google Chrome extension Aggr, which saves cookie login information.

Read more at cointelegraph.com