WP.com, to my knowledge, has never had a code or security breach.

There are communities (like Club Penguin) where they are quite promiscuous with their passwords and share login details with each other regularly, and then "hack" each others blogs.