2 ms·

Couldn't you freeze the current, compromised database and when a user tries to set their password, try to "log them in" to the frozen db?