Communications of the ACM April 2004 Vol 47 No 4
This is why you don’t use the same password on multiple sites