If people use the same email and password to log into other services, then those might get compromised also.
By now no one "should" be using the same password for multiple services, but it most likely still happens
By now no one "should" be using the same password for multiple services, but it most likely still happens
Because as far as credential hacks go, 100.000 users is nothing, you can trivially get password lists thousands of times bigger than that on any given day of the week.
All the security is in the password. Using a password manager to automatically generate and store password almost fixes that. Then there are services that insist using 8 to 16 character passwords :shrug