The easiest way in for hackers is sometimes a badly configured or generated password. And using same password for multiple accounts is just so bad that it cannot be explained enough.