Recorded: August 20, 2026
Scenario
Sarah considered herself careful online. She avoided suspicious emails, shopped only on trusted websites, and rarely clicked on unfamiliar links.
What she didn’t realize was that one of her online accounts had been compromised in a data breach years earlier. Like many people, she used the same password across several accounts because it was easy to remember.
One day, she discovered she could no longer access her email. Soon after, she began receiving alerts about password changes, unfamiliar purchases, and login attempts from unknown devices.
The problem wasn’t a sophisticated cyberattack. It was a reused password.
Once criminals gained access to one account, they began trying the same username and password combination on other websites. Within hours, they had access to multiple accounts connected to her email address.
Unfortunately, this type of fraud is more common than many people realize.
While passwords remain one of the primary ways we protect our online accounts, weak or reused passwords continue to be a favorite target of cybercriminals. Attackers use automated tools to test stolen credentials across hundreds of websites in a matter of minutes.
One of the best ways to protect yourself is to create strong, unique passwords for every account. Better yet, consider using a passphrase, a combination of several unrelated words that is both easier to remember and more difficult for criminals to crack.
For example, a passphrase such as: BlueCoffeeRiverSunset! is generally much stronger than a short password containing a favorite team name, birthday, or pet’s name. A password manager can also help by securely storing your passwords and generating unique credentials for each account.
Finally, enable multi-factor authentication whenever available. This additional layer of security requires a second form of verification, helping protect your accounts even if a password is compromised.
The reality is that cybercriminals don’t always break in. Often, they simply log in using credentials they’ve already obtained.
At FineMark Bank & Trust, a division of Commerce Bank, we encourage clients to take a proactive approach to cybersecurity. Simple steps such as using unique passwords, enabling multi-factor authentication, and regularly updating account credentials can help reduce the risk of fraud and protect your financial information.
