My username, password (even if hashed), e-mail address and all of my posts are in the hands of an unauthorized 3rd party. That means your database was compromised.
Never say there is “no way” to compromise a database - not knowing or understanding the risks is the path to weak security.
There...