Because lots of people only use a limited set of passwords. I guess people are getting more informed about phishing attempts on bank so now the time has come to move to more "innocuous" targets which still may use the same passwords.
Thats right I forgot,with most people you get 1 password for any sight you most likely have the password for all their sites.