[bombcar]

This is the main thing. A password leak either gets the password or gives you a basis for attacking variations of it.