People being hacked since the last Server Check.

If you read the first paragraph of that thread it is exactly what you just described and declared it isn't;

After running into a little bump on the road, I've thought up of a way to "lock" your account. That is, this method makes it so that nobody can go onto your account, provided they don't have access your username, birthday, and email account. If someone knows all of that information about you, then you're pretty much screwed hard.

Maybe they don't know that it doesn't work any more, although the last assertion in the thread is that it does