: Downloading or using leaked credentials without permission is illegal in most jurisdictions.
: The original source where these credentials are harvested.
The term usually refers to a text file containing lists of usernames and passwords (or email/password pairs) often leaked from data breaches.