They do not want to have such a list as it makes them a target.

What they do have is a searchable password list not connected to any usernames.