Steam account break-in attempts

From: CHYRON (DSMITHHFX)19 Nov 2016 23:19
To: ALL1 of 5
Sometime last night I got 3 email notifications from steam that someone tried to login to my account (3 different ip's), and they used the correct password :-O .

I reset my password.
From: Peter (BOUGHTONP)20 Nov 2016 00:27
To: CHYRON (DSMITHHFX) 2 of 5
What was your password?
From: koswix20 Nov 2016 01:03
To: Peter (BOUGHTONP) 3 of 5
Same as the nuclear launch codes they told Donald Trump: 1234
From: CHYRON (DSMITHHFX)20 Nov 2016 02:31
To: Peter (BOUGHTONP) 4 of 5
password of course
From: Manthorp20 Nov 2016 20:35
To: CHYRON (DSMITHHFX) 5 of 5
Every serious breach (bar the buggery) I've ever ever suffered has been clearly internal (OK, technically that applies to the buggery too).

But siriusly, I do suspect the larger part of all data breach is internal. And why not?  Pay the poor sods fuck all, give them the potential to gather enough data to sell, and who can blame them for doing so?