Pwned passwords, open source in the .NET foundation and working with the FBI
Honest question, an email I infrequently use in own the list https://haveibeenpwned.com/Is it safe if I simply add 2 factor authentication(edit: change password of course also) or do I need to add something else?