hmm wonder what they mean by that though. Companies they contracted with directly or for example maybe someone signed up for a forum or another large website using their same email and password as TWC email?

Its most likely some 3rd party not contracted with TWC, assuming TWC stores the passwords using 1 way encryption.

TWC sells all of the subscriber data that they legally can to 3rd parties, like most major companies.

But those passwords would be encrypted, as it comes from TWC. While any other 3rd party who gets it from user can altogether skip encryption.

hmm interesting. Didn't know that. Wonder who they sell it to.