HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API

Monday, March 30, 2026 at 06:42 PM UTC·Source: Troy Hunt

Updated: Monday, April 6, 2026 at 12:49 AM UTC

Executive Summary

For a hobby project built in my spare time to provide a simple community service, Have I Been Pwned sure has, well, "escalated". Today, we support hundreds of thousands of website visitors each day, tens of millions of API queries, and hundreds of millions of password searches. We&

Analysis

Source Attribution

Originally published by Troy Hunt on Mar 30, 2026.

Related Threats

HIGHData Breach

Hong Kong Hospital Authority apologises for data breach involving 56,000 patients

Edith Lin reports: Hong Kong’s privacy watchdog and police are investigating a large-scale data leak involving over 56,000 patients served by the Hospital Authority, which reported the unauthorised retrieval of a variety of information. The authority on Saturday apologised to affected victims – patients of hospitals in Kowloon East – for the breach that compromised... Source

1d agoDataBreaches.net

HIGHData Breach

Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk

Maxwell Zeff, Zoë Schiffer, and Lily Hay Newman report: Meta has paused all its work with the data contracting firm Mercor while it investigates a major security breach that impacted the startup, two sources confirmed to WIRED. The pause is indefinite, the sources said. Other major AI labs are also reevaluating their work with Mercor as they... Source

1d agoDataBreaches.net

HIGHData Breach

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack appeared first on SecurityWeek .

1d agoSecurityWeek