You brute force the username+password pair. As a bonus, you don't need to know the e-mail address, so you're automatically trying to break in to all the account

You brute force the username+password pair. As a bonus, you don't need to know the e-mail address, so you're automatically trying to break in to all the accounts in parallel.