Why am I getting "A data breach on a site or app exposed your password. Chrome recommends changing your password on "SITENAME" now."
The code appears okay. If you are using Google Chrome it has a feature that warns if the password you are using has been previously compromised. So, if you are testing with a common password this may occur. If this is production than you should update your password as the warning indicates.
Link to Consumer Affairs Article: New version of Chrome warns users if their password was exposed in a data breach