Recently the CBC radio had an article regarding this scam.
A business is hacked (Bell in my case) and they steal e-mail addresses and passwords,
The scammer then sells the list of e-mails and associated passwords.
Other scammers then use the list as "proof" that they have hacked your account or...