We explore a few common data breach search sites such as DeHashed and IntelligenceX, and discuss how they can be used to great effect to improve digital security and privacy.
So it is legal, in that I used the tools you mentioned (been awhile since I used "pwnd") to check, and found one breach and one paste (not surprising, I did get an alert and changed to even more complex passwords, as well as other mechanisms). So legal to see if I have been the victim of illegal exposure of private information? Illegal if someone uses it to steal my ID? Odd juxtaposition!
However, great article, and thanks for the security reminders!