Comment by the_french

They can modify it to simply say whether your account was compromised, regardless of whether you have an account (ie, if no account -> not compromised).