Well, me and a coworker came across a database with password hashes. Roughly 15% matched the hashes of one of the top 50 most common passwords. -.-
Of which the developers of said database must surely be included since it would seem they neglected to apply any random salt when generating said hashes. Otherwise, there's no way you could have ran the comparison ;-)