No legitimate team will ever use or distribute 100K-UHQ-CORP-BUSINESS-COMBOLIST-BEST-QUALITY.txt. It is, by definition, contraband.
MFA is the most effective defense against credential stuffing. Even if an attacker possesses a valid username and password, they cannot access the account without the second factor (e.g., a code from an authenticator app or a hardware token). 100K-UHQ-CORP-BUSINESS-COMBOLIST-BEST-QUALITY.txt
Moving away from password-based authentication entirely removes the threat vector. Methods include biometrics (fingerprint, facial recognition) or FIDO2 security keys. No legitimate team will ever use or distribute