Best feature suggestion ever. But what would be cool is to do that, but instead of pre-fill in their password, notify them that they are using a password that is known to have been a previously leaked password of theirs.