People often reuse user/password combinations. So if attackers can find working combinations here, those are combinations that they can try elsewhere as well.