US
Report compiled from more than two million leaked passwords during the year shows little change in patterns