It's just a matter of how long it takes and if the hacker gives up at some point to move on to easier targets. Someone could have their password cracked and not know about it for awhile. At the very least, changing passwords will clean up the compromised passwords.