100%. I had a friend in High School who liked to play Neopets (www.neopets.com). He would try out tons of old accounts with valuable pets on it, trying to see if they had guessable hotmail usernames. 1/10 times they did and he got the accounts and had the passwords sent there.