I was at DEF CON in Vegas last week and a random guy in line for coffee said he'd cracked my exact password scheme on a bet. He didn't even need my email, just my username from a breach dump. Made me switch to Bitwarden that same night and enable 2FA on everything I own. Has anyone else had a stranger change your whole security setup in 5 minutes?