Check your HIBP DB in PPE to make sure it’s up to date
This last month saw a lot of activity in the HIBP database. We had 11 updates with nearly 700 million new passwords. They got distributed as follows:
Oct 23rd - 38,046,957 hashes
Oct 24th - 96 hashes
Oct 25th - 27 hashes
Oct 30th - 1886 hashes
Oct 31st - 6689 hashes
Nov 1st - 5604 hashes
Nov 3rd - 8612 hashes
Nov 4th - 10,599 hashes
Nov 5th - 652,594,350 hashes !!!
Nov 12th - 633 hashes
Nov 14th 5,034,789 hashes
We have now updated our customer’s access and you can update PPE with the HIBP tool. Since this is a massive addition, please give it some time as even an incremental update will likely need every file updated. I might just do a full update as this point. You are also going to need 27GB of free space, so check that first!
Troy Hunt, the owner of HIBP, has a great post with a deep explanation of where these passwords came from and why it came out in chunks. Troy Hunt: 2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned