To defend against lists like "yulyay068sets...", the following security controls are recommended:

For Users:

For System Administrators:

The term "cracked" in this context does not necessarily mean that encryption (hashing) was broken through brute force on a live server. Instead, it usually refers to the processing of previously leaked databases.

Security administrators should look for the following patterns in their Web Application Firewall (WAF) and SIEM logs: