Several times I’ve written on the topic of weak passwords and the consequences. It cannot be emphasized enough that passwords represent one of the weakest links in security, whether for an organization or consumer.
Microsoft just sent out an email on the topic with lots of great tips. Read it here.