Its called Brute Force hacking. If you know the login the password is easy to get.
Its an automated process so he wouldn't have had to sit and think about anything. There are plenty of Trojan horses that will ride in gather up your information and travel across a network until it finds a computer vulnerable enough to let it out.