For added security, we reject passwords that have appeared in publicly available breaches.

IncQuery itself has not been breached; these exposed passwords are taken from 3rd party breaches such as LinkedIn's and Dropbox's.

The data is compiled by Troy Hunt, a famous web security expert. You can check if any of your accounts have been exposed through his website.