Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well.