One of the open secrets in the adult webmaster biz is that a vast majority of "password hacked" sites are actually free sites masquerading as pay sites--so they can refer the would be freeloaders to paysites.
As for actual paysites' passwords, there are scripts and login trackers available that KILL accounts that are shared so hacked free passwords don't remain effective for long.