I first noticed this weakness when I was caught in a "password breach", which was really a fishing site for passwords. I checked the list of passwords, and a s

I first noticed this weakness when I was caught in a "password breach", which was really a fishing site for passwords. I checked the list of passwords, and a significant amount had values like "uRFcWEBSITENAME". I reasoned first they would try USERNAME, PASSWORD, and then try USERNAME with passwords updated for the other websites they were hacking. Even the section of passwords beginning with just the first letter of WEBSITENAME was unusually large. Then I scanned for passwords containing the first few letters of WEBSITENAME... yup, a conspicuous lot of them. Those people at least tried to be smart about their password uniqueness, but it didn't really work.