I got pwned by my cloud costs
Shouldn't lookups be where cdb shines? Hold my beer:  $ shard="$(echo "${sha1}" | cut -c 1)"
  $ cdb -q pwned-passwords-v8-sha1-${shard}.cdb "${sha1}"

But as a cloud evangelist at Microsoft, you may sing the corporate IT gospel anyway.
¹https://mro.name/agakdfa