Hot take: I keep seeing people in my office reuse the same password with just a number changed at the end... like 'Summer2024', 'Summer2025'. Our IT guy said that's the first thing automated attacks check for.