In short, SMIRL and Chewy were stealing keys from the users that used their website, so basically when someone stole a key on an account he had all of them in a log file. Never use an account based stealer, I wouldn't recommend them unless they're from someone trusted.