The following message may appear on an employee's phone when they open it:
'Compromised Password: This password has appeared in a data leak, which puts this account at a high risk of compromise. You should change your password immediately'
When you save passwords on a device or in a browser, Apple or Google compares those passwords with a list of breached passwords in the wild. It’s quite common for users to have the same password (complex or not) for several services, like Facebook, X, Adobe, etc., including corporate systems.
If you or the user is concerned that the password has been compromised, use the Forgot Password link from the login screen to reset. It is recommended that users set different passwords for different services and use MFA to enhance account security.