A credential stuffing attack can happen when usernames and passwords are leaked in data breaches, often at online retailers. The…