How are passwords detected by hackers?

I have heard several cases where some hackers have been able to hack top social media networking sites like Facebook. How is it possible? How are they able to identify the details of any user inspite of Facebook’s highly secure environment?