What I want to know is...

If it wasn't sent from a hacked account, how did they get access to the account so that the could determine who had received messages?

Unless they know who received the message, how was the followup message explaining it was a hack sent?