A single security lapse can undermine even the strongest password manager. A recent event shows why you should pay attention to who handles your passwords.