I think one of the major bot's databases was compromised or leaked.

Bots keep track of all users account details, security codes, etc.