*shakes his head* This is precisely why I try to delete my accounts (or at least change my password to something random I won't remember) from services after I'm through using them. Even then, it's scary thinking about what hacker groups could steal/sell, even from individuals who barely use the Internet.
I'm pretty sure it's real. SQL injections are a real problem that I have even dealt with here at Victory Road, but I cleaned many of those up years ago. Passwords here are also hashed (meaning it's impossible to algorithmically get the original password back without testing every single combination) twice, so they wouldn't be of much use to a hacker. (It shocks me that there still exist MANY services that don't encrypt or hash passwords.)
