People get the list of emails and password exposed by hacks and try it on all kinds of different popular services. And to my surprise, they publish it on Darkweb forums so people can use premium services for a while before the owner of the accounts realised they were compromised. This is commonly referred to as "paste". Here is the paste identified a few days after I realised my Spotify account was compromised.