Troy Hunt; Have I Been Pwned
troyhunt · B · active
Troy Hunt's blog, HIBP breach-disclosure analysis, identity / credential-stuffing research. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → feed https://www.troyhunt.com/rss/ 5 (or https://feeds.feedburner.com/TroyHunt) for dates, then webfetch the post URL for body. AVOID: Homepage WebFetch lists post titles but does NOT surface dates, use the RSS feed for dates. Many posts are 'Weekly Update' video roundups (lower IOC/TTP density).. | 2026-07-05 admiralty audit: B, original first-hand breach research (HIBP), high reputation; weekly video roundups are low IOC/TTP density but that does not lower the source-reliability letter. No status change.
Cited in 2 entries
Citation cadence
Citation days per ISO week (15 weeks of coverage span, total 2).
- Troy Hunt: a 24.9M-address ShinyHunters/Carhartt breach-claim collapses to 12.9M real records once TPC-DS synthetic benchmark data and several duplicate/test-account patterns are filtered out, a reusable methodology for verifying inflated breach-claim record counts2026-08-28
- 7-Eleven confirms ShinyHunters breach of 600,000+ Salesforce franchise-application records, same campaign as Instructure, Vimeo, Wynn Resorts, Vercel, Medtronic2026-05-19