picture...

Your pc / browser.

did you use the same password on any other sites...? if yes, it could be from those sites that are already compromised...

you're using the same password, on multiple sites (including lowyat). One of these accounts has been compromised in a breach, as such someone with access to these compromised password lists could try to hijack your account.

hmm weird, not at all, as i've been using randomize password and password manager so each website all different random passwords.

based on https://haveibeenpwned.com/ your email appears on at least 12 different data breach records.

IINM, the password notification on EDGE is based purely on whether the password in itself existed before in any breach (even if was used by someone else, with different credentials). you can try to check if your password is unique and has not been found in any breaches before at https://haveibeenpwned.com/Passwords.

thanks for such sharing... it's really useful to detect whether email has been breached or not

hmm i see. thanks!