The assumption is that the accounts were "hacked" using spearphishing from a group of 4 known handles that they have 'moderate confidence' is associated with the Russian govt.

In other words, these dumb fucks clicked into a link that took them to a fake login page and typed their password into that page which is how they were 'hacked'.

The real scandal is how fucking dumb people who run this country are.