To help in this task, they had to call the family members of still-missing employees and ask for personal information that might be included in passwords:
"What is your wedding anniversary? Tell me again where he
went for undergrad? You guys have a dog, don’t you? What’s
her name? You have two children. Can you give me their birth
dates?”
https://www.nytimes.com/2014/11/19/magazine/the-secret-life-...When my cousin passed very unexpectedly, this is exactly what I got called in to do... was easy enough for me to take some educated guesses and figure it out, I can't imagine that being suitable for a large firm to handle their password issues.
Immediately after the attack, exchanges moved their datacenter operations to sites in NJ about 80 miles apart and both exchanges and large brokerages setup backup datacenters in Delaware, far enough away to be unaffected by a thermonuclear blast hitting New York.
I believe, prior to 2001 only JP Morgan (pre-Chase acquisition JP Morgan) had backup datacenters in Delaware but there may have been one or two others.
Presumably the contents of various safes similarly survived.
Figure the typical sporting-goods store gun safe weighs about 350 lbs (159 kg) and isn't really all that secure (a sawzall with a metal blade can open them). They don't do much better if you drop them from "only" 200 feet up (61 meters):