I had a password exposed via a compromise/dump of the perlmonks.org website a year or two ago.

That didn't bother me since I use per-site passwords, stored in a pwsafe database. But it is an example of sites compromising passwords.