Troy Hunt (@troyhunt) header
Troy Hunt (@troyhunt) profile picture

Founder & CEO of @haveibeenpwned, the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.

Australia
Joined April 2008
Sometimes, life feels like a fairytale. This is now my favourite photo ever ❤️ – at Oslo, Norway
62
25
6
1,921
Anyone else get one of these from @digicert?
19
9
2
68
15,123
Anyone got a security contact at @TooLostDistro? I haven’t been able to raise them via their published email address.
Too Lost is currently undergoing scheduled maintenance as of Monday, November 2, 2026, at 4:17 PM Eastern Time. We anticipate that services will be restored within the next several hours. We apologize for any inconvenience and appreciate your patience while we work to get everything back up and running. If you have any questions or need assistance, please contact us at [email protected]. Thank you for your understanding. The Too Lost Team
2
2
22
8,948
New breach: Harvard University was targeted by ShinyHunters last year in a breach that exposed 851k unique email addresses. Data included personal info related to the university's alumni and fundraising systems. 64% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Ha…
5
13
2
31
10,731
And finally, the irresponsibility of the services that have made sensitive PII easily searchable and able to publicise it in this fashion. They made it trivial to pull not just a political candidate's data, but his sister's as well. FFS.
2
3
1,926
It's also dumb because one look at the published data shows it's a total non-story: last login is 54 seconds after join date. Wow, the guy was really invested in chasing that group sex!
1
3
1,026
It's then wielded as a political weapon to score cheap points: "look how dirty the guy on the other side is". This isn't the only case in US politics I've been contacted about in recent times either. Another one was for a guy on the other side. Both dumb, cheap takes.
2
1
5
1,951
I've got a real issue with reporting like this, where journos trawl through data breaches then publish a whole bunch of PII "in the public interest". It's a massive privacy violation and that alone should be enough to stop it.
15
1
53
10,526