The primary purpose of downloading such a list is . Because many people reuse the same password across multiple services, a password leaked from a low-security site in 2019 might still grant access to a person’s bank account or primary email today.
The data is sold in "private" circles on the dark web for high prices.
By the time a list reaches a public download link, it has likely been "picked over" by thousands of other hackers, meaning most of the accounts are already flagged or secured. How to Protect Yourself