: These lists are primarily used by "crackers" who use automated software to test these credentials across popular services (Netflix, Spotify, Banking, etc.). If a user reuses their Gmail password on a smaller, less secure site that gets breached, that password will appear in these lists and be used to try and break into their actual Gmail account. The Risk to You :