A lot of users tend to use same password for various accounts. So, if the hacker gets one password, it means he can gain access to other accounts owned by the user.