The first one probably shouldn’t be such a surprise but still, wow! My password source of several hundred thousand accounts had nearly two and a half thousand “password” passwords, which is not only a pretty poor choice given its clearly available in a dictionary, it's also an insanely obvious one.