That doesn’t seem too far off from what I would expect, if your site actually cares about the data your users store there. I wouldn’t recommend it, but you cou

That doesn’t seem too far off from what I would expect, if your site actually cares about the data your users store there. I wouldn’t recommend it, but you could try a slightly scarier explanation. (“Sorry, hackers have cracked this password on other sites. If you use this password elsewhere, you should consider immediately changing it.”)