[violentvinyl]

It's great that they're doing this. We had kicked around the idea of signing up all of our customers for HIBP, but decided against it for obvious reasons. What we would really like to do is to be able to notify our custoemrs when their email addresses show up in breaches. Besides being helpful to our customers (who will mostly not be aware of useful services like HIBP), it would potentially help reduce fraud on our sites.

Is anyone aware of a way to get access to sanitized dumps that we can compare to our customer DB internally? It's unlikely we'd get approval to go out and get the dumps and analyze them ourselves, but if there was a reliable source like HIBP, but for bulk comparison, we could bring a lot of value to the business and to our customers.