I received a mail from Microsoft that someone has accessed my account. I decided to change my password to something really hard to guess: 7Psv0IbBIVda (no, that's not my cat's name). Then a month or two I received another email - someone has again accessed my account. Ow, really? How? They guessed the password?
Not only that. I received an SMS with the same notification. Later I received another sms from a similar international number from a "bank" in london that I have to contact them about "very vital" transaction. I'm starting to think that it's Microsoft's security which is compromised, not my account.
So keep that in mind when thinking of a password for your Microsoft account. Don't put one of your important passwords there!