> one of the 10 activists said “their password may have still been in use as recently as late 2015 or early 2016.” So these were all abandoned passwords, at th

> one of the 10 activists said “their password may have still been in use as recently as late 2015 or early 2016.” So these were all abandoned passwords, at the point Bindmans confirmed them correct. Having said which, the notion that people are generally crap with passwords is obviously correct. Also I wouldn't be at all surprised if the way the article reports the password verification is abridged or at least wildly inaccurate. Edit: I notice the Guardian article says Jones is represented by Jules Carey, who's a very well known and trusted lawyer among UK environmental activists, not a random person. I don't know if that's who they gave up their old passwords to, but we seem to be generally letting our imaginations run away with us here so let's say it was.