And an email which went in the spam box starting off something like

I'll cut straight to the point. I know your password is ABCDE (not what it said but it did have a former password right).

I didn't even open it, but double-checked none of my passwords were that.

We've been told at least four times that personal data has been lost through hacking, via past employers, past businesses we dealt with, and, on one occasion, some government agency.

We have different passwords for everything now, and as we naturally forget a lot of these they get changed pretty often.