Expect to get hacked — protect your password database
Some of the largest companies (with the biggest security budgets) have had their user databases leaked. A quick haveibeenpwned.com search of my own personal email address shows that my own credentials have been leaked by both MyFitnessPal and Canva. This includes email addresses, but also passwords!