Sure, the bad guys have all of our passwords. As it goes, they mostly don't need them:
"We eventually cracked 576,533 or almost 92 percent of the sample within a period of 31 days," Sigler said.
"Such a short cracking time using a word list from last year’s [common passwords] study shows that passwords were as predictable as ever.
"'Password1' was the password we came across most often in this year’s analysis."