The password leak that you're becoming warned about might have happened whenever—from a couple of days into a couple