I understand, and I think that's why I backed off my initial sentence by the end. My concern was to know when the pwned password database was updated, but I saw in another comment that the last updated HTTP header can be used. But as of now, there doesn't seem to be a way to know if a particular breach has contributed to the pwned password dataset. A plaintext data class would be a flag, or another counter like PwnCount would give an idea of the immediate scope of compromised passwords.
Mike
I understand, and I think that's why I backed off my initial sentence by the end. My concern was to know when the pwned password database was updated, but I saw in another comment that the last updated HTTP header can be used. But as of now, there doesn't seem to be a way to know if a particular breach has contributed to the pwned password dataset. A plaintext data class would be a flag, or another counter like PwnCount would give an idea of the immediate scope of compromised passwords.