Account takeover occurs when attackers use stolen or compromised credentials to gain unauthorized access to users’ digital accounts.