Or date of birth, mother's maiden name, and social security number - if the hackers have that they'd be after my credit card and bank accounts, not my SRP account :)