Hi:
Somewhat interesting, but not unexpected.
http://www.imperva.com/news/press/2010/01_21_Imperva_Releases_Detailed_Analysis_of_32_Million_Passwords.html
Note the Report download link, when you click on the above!