With a large user list, some people will have really terrible passwords.  So my guess would be by trying random week passwords to random accounts you could compromise a few hundred accounts in the first day.  With diminishing returns over time.