We haven't solved how to prevent large-scale credential stuffing attacks that exploit reused passwords across different sites.
open
Global / Unspecified, Global
WS00768
When one website's user database is breached, attackers often successfully reuse those same stolen credentials on other unrelated websites where people reused the same password. Preventing this cascade of breaches remains an ongoing security challenge despite widespread password reuse warnings.