Acutally, using the example from the Culvers site, the names weren't obtained illegally, or by breaking into their site.
An Internet user simply registered properly using the name AdminGirLX, then using the on-line member list, began sending spam PM's to everyone on that list, most likely employing "bot" software to do it.
Their system may not be quite configured correctly to minimize this kind of activity, but it's becoming more common.
Users should look at their PM's carefully to see who these types of messages come from. Admin messages should only come from people listed in their respective Forum Leaders pages.
In the case of Jouster, the Jouster Forum Leaders Page
In the case of our forums here, the Milsurps Forum Leaders Page
I notice that the Jouster page refers to something called the Romper Room. I have no idea what that usergroup is for, but having dealt with some pretty strange personalities during the temporary hosting period here, I can only imagine.
Hope that helps some of you avoid getting a virus …
Regards,
Badger