Discrepancy between Number of pwd_leak Logs and Breached Credentials Detected in Security Center

This knowledge article explains the reason why there can be a discrepancy between the number of pwd_leak logs and breached credentials detected in the Security Center dashboard.

• Security Center
• pwd_leak
• Breached Password Detection

The pwd_leak logs for login will be throttled to one per hour, while the number of breached credentials detected in Security Center counts the raw, unfiltered number of events.

NOTE: Logs for sign-up and password reset will not be throttled.