They can recover their account keys by using the Owner key to change all other keys.
If they lost their owner keys or it has been intercepted by the hacker (for example, they used it to log in to a phishing website), then the accounts can not be recovered.