In my opinion this article “Data breaches, phishing, or malware? Understanding the risks of stolen credentials” by researchers from Google et al., is impressive: hard data which should make all of us (IT security practitioners) think and help improve the security of IT services, now.