There has long been a market for stolen credentials, with sophisticated e-commerce websites that provide all the information needed by cyber criminals looking to hack into online accounts. The crooks running the websites are making a handsome living and there is no end in sight for the supply and demand of user ids and passwords. It is time to consider using a password manager and 2-factor authentication (2FA). And do not re-user passwords.