We should just skip the steps and just use documents from these data breaches to verify "ourselves".