Knowing and doing something about it are two different things. Keep in mind at least one of the accounts was from the 90’s! I would suspect a lot of folks had a very simple password back then for multiple sites.