Pro tip: a guy at a conference in Austin told me his company got hit because they never changed the default password on their office router. | Cybersecurity Tips - Talk Freely
My router's default password was the first thing I changed. Oscar666 is right, that "plug and forget" mindset is a real security risk. Taking five minutes to set your own stuff is just smart.