Even with a low success rate (typically 0.1% to 2%), the massive scale of these lists allows attackers to compromise thousands of accounts quickly.

What is Credential Stuffing | Attack Example & Defense Methods

The list is loaded into automated bots that systematically test the credentials against popular services like banking, e-commerce, and social media.