Three years is a bit past the reporting parameters for election hacks. And passwords are important.