|
It could be that they just have a database table with all your previous passwords ie.
user - Fred Blogs
previous passords - pass1, pass2, pass3
They then wouldnt have known what the current one should be.
In fact if you put your mind to it there are a dozen explanations
|