The hackers installed malware which enabled them to access any computer using the New York Times network, steal the password of every employee, and access 53 personal computers, mostly outside the Times offices.
When someone who has enabled the feature is unable to login using the normal means, they can click "forgot my password" and request that keys be sent to their specified friends via Facebook message.