That password reset was executed in the most stupid way possible: new passwords were generated and sent by email to the account owners. Email is usually sent unencrypted, so that Moniker account number + passwords can be read at every node between the sender and recipient.