Getting access to a system using credentials leaked from another system, assuming that the user reuse passwords.