1. The value of password theft
Microsoft Research published an interesting paper on the value of password theft for banking. They state that stealing passwords is the easiest part of the chain, and that getting real money out of banking accounts requires a mule, someone to act as the middle-man and eventually take the loss.
A large number of emails that are posted on this blog involve setting up a mule, someone interested in the easy money of a stay-at-home job, acting as a transfer agent or secret shopper. There are many spams that purport to be from major banks, asking you to verify transactions (or present fraudulent transfers and ask to reverse them). I generally don't post them here, as they are simple (and boring).
Summary: People who have their passwords stolen generally do not lose money, those acting as mules do.