Utilize a dedicated password manager to generate, store, and automatically fill complex, randomized passwords.
A 190,000-record combolist rarely comes from a single major hack. Instead, it is usually an aggregate compiled from several different attack vectors:
: Compromised corporate email accounts are used to send fraudulent invoices or phishing links to coworkers and clients.