Small sample size, but pretty clear that following a data breach, it is the responsibility of the breached company to *force* users to reset passwords. A shockingly low number (~33%) voluntarily change their passwords. https://www.zdnet.com/...
“The study, presented earlier this month at the IEEE 2020 Workshop on Technology and Consumer Protection, was not based on survey data, but on actual browser traffic....” wow. (not surprised but ..wow). https://twitter.com/...