I broke into your e-mail and need to get you to force a password reset on some other account, so I maliciously modify to give you an invalid stored password.
If the attacker already has control of the email address, they can reset the account without going to such lengths--just visit the site and request a password reset.
