My friend’s email password was compromised. Is he the weakest link? Possibly, though recent personal experience shows he may have been sold out by the companies he deals with.