You may know that there are services like https://haveibeenpwned.com, where you can see if your e-mail and previous passwords have been part of larger known hacks, but this only gives a historical picture.

Many larger companies on Microsoft 365 already get help from Entra ID P2 licenses, which make it possible to recognize leaked passwords in real-time - but what do other companies with smaller licenses do?

Microsoft has now recently started making the information about leaked passwords available for all license types, so that SMEs can more easily protect themselves. We therefore daily review audit logs across Microsoft 365 for all customers - and contact the affected employees to change their password.

Do you have a good procedure incorporated for leaked passwords in your everyday IT operations?