Goes to show that humans are always* the weakest link in information security.

*For anyone who doesn't like absolutes, consider it a rounded statement