Sorry for your loss. It is like being violated. Has happened to me before because I used a weak password for years that I dreamt up in the early 90's... ignoring Moore's Law
I now follow the password creation tactics laid out in Tallest Skil's .png above... but tend to throw in some punctuation/etc. as well.
A good place to test the time it might take to brute-force crack a password can be found here, quite illuminating for many people I suspect.