I was also thinking about using canaries like this to detect database leaks - basically insert fake users into your DB with random emails and if you see that so

I was also thinking about using canaries like this to detect database leaks - basically insert fake users into your DB with random emails and if you see that somebody is trying to email the accounts or log-in to their accounts you know you have been compromised. Not sure if anybody has ever used something like this...