I'm guessing it's SIMjacking?
It's weird they started with smaller accounts then did juggernauts next, though.
It's like robbing a bank and taking the lollipops first.
For every verified account that's been hacked, there are thousands of smaller ones.
If somebody has a de facto master key for access to every account, nobody's safe.