European Space Agency (ESA) is living down a database breach that took place over the weekend. Three tranches of data were dumped anonymously, for the lulz. 40% of more than 8000 alleged passwords that were dumped in the breach were just three characters long, and more than a third of the rest were no longer than 8 characters. The 8-character passwords included two of the worst passwords possible: password and 12345678. But poor password choice by users doesnt seem to be a sufficient explanation, because the about 2% of dumped passwords were apparently 14 characters or longer.”]