To play it safe, it's building a tool to let developers manually identify any of their users who may have been affected by the big breach.