Most people do use the same passes.
back in the early 2000's, i use to download hacked porn passes to paysites. (im sure some of you remember this)
"someone" would brute force a xxx site and then have literally 1000's of login/passwords.
As it turned out, the usernames to said xxx sites were automatically generated. So, if you signed up and your email was
Asshole@aol.com, then that was your auto-generated username to the xxx site.
So on a whim, i decided to try and login into various peoples aol accts using their porn-site password. it worked on 8 out of 10 people.
Eventually, It got boring emailing their contacts from their username...With such messages as "Dad, im gay now" or sending a cock pic to all of their co workers. The replies were hilarious, yes....But I needed to network my mischief...so i started sending netbus to their contacts under the guise of some benign program. Back then almost no one used a firewall or AV. Luckily for them i was just a mischievous prick and not a thief. Astounded me at all the personal info people saved in their document folder.
P.s. Facebook is Gay.