Just a small wake-up call, I received an email yesterday with one of my throwaway passwords in the subject. It said, "I am aware that this is your password, pay me $lots in bitcoin or I will do some nasty things". I have not used that password for a long time and do not know which website was hacked to get hold of it. It's just a good reminder to never drop guard on security.