If you log in with your Web Panel password, you can change an accounts' password without needing to know the old one.

The DreamHost engineer who's been commenting here says the web panel passwords haven't been compromised (I changed ours anyhow).