Doesn't mean they got hacked specifically. Means that they had spiders or bots roaming the web collecting any and every e-mail in the world, collecting lists, and then sending spam to it. Or possibly (I've always suspected this as well) they randomly generate the names, and often set different return paths so that even if they bounce the second target still gets the spam message.