Start a social entreprise that invloves data breaches (how to do it legally)

[jonah (Jonah Aragon)]

What is the legality of sharing data from data breaches?

Not a lawyer, but I wouldn’t bank on that. What I have noticed is sites like haveibeenpwned for example do not share the corpus data, only a hashed version. You can however use a password manager that can do a look up there, and both Bitwarden and KeepassXC have that feature (they create a hash and then check the hash).