/
All Behaviours > SB007 Checks whether passwords (or other personal data) have appeared in known data breaches
SB007 Checks whether passwords (or other personal data) have appeared in known data breaches
Tools such as haveibeenpwnd.com can be used to check if passwords (or other personal data) have been leaked in known data breaches.
Why is it important?
Staying up-to-date with data breaches is important.
Knowledge of an account's details being leaked can provide valuable time to secure an account. Login details can be changed and any recent activity reviewed.
Priority Tier
Behaviours in SebDB are ranked by their impact on risk. Tier 1 behaviours have the biggest impact, Tier 4 behaviours the least.
Risk Mitigated
Account Compromise
Account compromise happens when unauthorised people access them.
Further reading
https://link.springer.com/chapter/10.1007/978-981-10-0419-3_24
https://www.ncsc.gov.uk/blog-post/passwords-passwords-everywhere
https://pages.nist.gov/800-63-3/sp800-63b.html
https://www.ncsc.gov.uk/guidance/data-breaches