Very easy, it only needs a member to be lax with the security of his password, either by leaving it in an obvious place at work for example, or with his computer security allowing it to be hacked and all his passwords read or by the use of a key logger.