Hmm, this is a nice topic, I have been too careful and I do not fancy storing my passwords online but lately I've been too lazy to create a different passwords, so I do use same passwords for a few new websites I've logged in, I hope I won't fall victim one day.
Something happened to me last week, I was trying to open a Payoneeer account and I got an email from hackers I guess to input my OPT, thankfully I was very observant and checked the subject and name on the email, if I had clicked the link from that source to verify my account, I would have been on a hot seat. Hehe
Yeah that's scary, some friends have mentioned something similar as well.