> Further to this, you claim that you have been compromised on HUNDREDS of sites even though you use a unique password everywhere? It’s not too far-fetched. I

> Further to this, you claim that you have been compromised on HUNDREDS of sites even though you use a unique password everywhere? It’s not too far-fetched. I’ve been compromised on dozens of sites out of ~1.500 sites on which I have accounts, all of them with unique email addresses and unique passwords. Those dozens accounts are just those I happen to know about (through HIBP, incoming email spam, or the occasional site owner’s disclosure) so they’re probably just the tip of the iceberg. Sites are being breached left and right. If you’re lucky, the site owner tells you. Many won’t.