This kind of breach makes our "difficult" passwords irrelevant. Really, I feel it's kind of silly to create a password that even I can't remember without a note as some web sites still require a password containing at least a number, a special character, an upper case, a lower case, etc., when all the hacks happen at their ends.