Sunday morning, around Midnight Mountain time, one of my family's not very well secured vaults was logged in to from an IP address in Bangkok. I'm wondering if

Sunday morning, around Midnight Mountain time, one of my family's not very well secured vaults was logged in to from an IP address in Bangkok. I'm wondering if that is related to this issue; I would assume that attempts to login using all the account information in haveibeenpwned databases would cause a lot of traffic and attempts to block it could lead to Cloudflare collateral damage, as well as heavy load on the backend systems. I had contacted their support (which I'll say was really good a couple years ago when I signed up), and got a pretty lack-luster response. The initial response was along the lines of "Are you sure your account was actually accessed? Did you check the e-mail that was received to make sure it wasn't spoofed? Could it have been a login you forgot you did? Maybe a friend is playing a joke on you?" I asked them if they had any logs of what actions were taken related to the login (just a login, was the vault accessed or downloaded)? They said they don't keep those sorts of logs for personal accounts. I've been a supporter of Bitwarden, but lately I've been more dissatisfied and ready to switch to something else. A large part of why I selected them was the audit a number of years ago, and that they had clients for all the platforms I was interested in. On the fence, I think my account renews in 5 months...