My wife used 123456 for 20 years without incident until she was forced to change it. Hackers go after corporate victims as the rewards are much higher. Scammers attack individuals and trick them into handing over passwords, no matter how strong they are.