The 6 million username/password database was collected by Mark Burnett, author of Perfect Passwords, over the course of many years. Given that most people use a

The 6 million username/password database was collected by Mark Burnett, author of Perfect Passwords, over the course of many years. Given that most people use a password strategy that involves stronger and more unique passwords for finance and ecommerce sites, I'm guessing that the vast majority of these username/password pairs were obtained from less important sites. Perhaps Mark will pipe in to clarify this point.