Hmmm Do you think it was something as simple as a password hack?
Could be client-side or man-in-the-middle issues. I do not see a sign of password hack in the exchange between Q and CM.
If the password was hacked, the interloper could have posed as Q anywhere on 8ch.net, or cleared GA.