Project Svalbard, Have I Been Pwned and its ongoing independence
It's interesting what HIBP reveals about both attackers and defenders.<p>HIBP held a long randomly generated password I used exclusively on tvtropes. It was in plaintext in a pw dump, suggesting they weren't even hashing at the time.<p>I contacted tvtropes a few times but got ignored with no announcement.<p>It's not a banking site, not sure what we should expect. But given compelling evidence of a breach and making no announcement to users seems irresponsible.