using information obtained elsewhere on the internet, via an automated process, to try to gain access to some accounts.
Until I see hard evidence to the contrary, the above statement from the Telegraph article reads as if it might have been a dictionary attack. In which case I would hazard a guess that those affected are people stupidly using weak passwords.