I wish I could find the reference, but I recall someone once saying that sites like Google or Yahoo will provide a really subtle "canary" to indicate that your account details may have been requested, through just requiring you to re-accept the terms of service agreement.