Awareness: passwords and sign-in prompts

A colleague's work account was signed into from an address nobody recognises, in the middle of the night. Their password manager report and their sign-in prompt log tell the story. Find the weak and reused passwords, work out how the night's prompts ended in an approval, and choose what to do differently. Every account, site and address is fictional and generated for you; no real passwords appear anywhere.