Publication Date – February 8, 2021
Exposed Credential findings are identified by aggregated breached site data. The data is collected from public sources. Email addresses belonging to a company are matched to the information in the breached site database.
To preserve business confidence and trust, we do not test that exposed credentials (such as using a username and password that were disclosed from a breached site) are valid.