# content
The leak doesn’t even need to happen on their site, they could check the password hash against known leaked hashes (from have I been pwned for example) and block it

# source.content
The leak doesn't even need to happen on their site, they could check the password hash against known leaked hashes (from have I been pwned for example) and block it