Drew how crap was your password? was it "igloo1" again?

Maybe they knew because there was an internal breach where there was some password compromises, or they detected a brute force attack and then checked the password strengths. That is my guess.

Remember everyone: use STRONG PASSWORDS! Over 7 characters in length with a combination of a symbol, a number, uppercase and lowercase!

And change it every 60 days!

-W.