Using the same password for a game as you do for a random web forum is like having one key for your house, your car, and your safe.
While Lucas slept, the script "captured" his account. By morning, his pixelated mansion was empty. The Lesson in the Code
At the time, many players hadn't enabled Two-Factor Authentication. A script can guess a password, but it can’t mimic a code sent to your phone.
If you ever see a "Full Capture" config for a site you use, it’s a signal to change your passwords and turn on 2FA immediately.