You don't need to be the victim of a state-level targeted attack. You just need to be a public figure online[0] and attract the attention of a bored hacker.
[0] https://www.theverge.com/2012/8/6/3224597/mat-honan-hacked-a...
[0] https://www.theverge.com/2012/8/6/3224597/mat-honan-hacked-a...
Did those attackers guess or compute even one password at all?