It's from 2012, but was a interesting read for me.
"This summer, hackers destroyed my entire digital life in the span of an hour. My Apple, Twitter, and Gmail passwords were all robust—seven, 10, and 19 characters, respectively, all alphanumeric, some with symbols thrown in as well—but the three accounts were linked, so once the hackers had conned their way into one, they had them all."
Kill the Password: A String of Characters Won’t Protect You
I started with 8498 on all my accounts, the same as my bicycle lock.
Fortunately nothing has ever happened.