<story><title>HaveIBeenPwned adds yesterday&apos;s Facebook breach</title><url>https://haveibeenpwned.com/PwnedWebsites#Facebook</url></story><parent_chain><item><author>pvorb</author><text>One thing that really keeps annoying me about HaveIBeenPwned is the fact that I can enter anyone&amp;#x27;s email and get their status immediately. This way I can anonymously check if that email had an account at a breached site at the time of the breach. The obvious solution would be sending out a link via email before results can be looked up, but this might not be in HaveIBeenPwned&amp;#x27;s interest.</text></item></parent_chain><comment><author>CGamesPlay</author><text>This isn&amp;#x27;t universally true, the site does have a notion of &amp;quot;sensitive breaches&amp;quot; which will not be visible to someone who cannot confirm ownership of the email address.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;FAQs#SensitiveBreach&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;FAQs#SensitiveBreach&lt;/a&gt;</text></comment>
<story><title>HaveIBeenPwned adds yesterday&apos;s Facebook breach</title><url>https://haveibeenpwned.com/PwnedWebsites#Facebook</url></story><parent_chain><item><author>pvorb</author><text>One thing that really keeps annoying me about HaveIBeenPwned is the fact that I can enter anyone&amp;#x27;s email and get their status immediately. This way I can anonymously check if that email had an account at a breached site at the time of the breach. The obvious solution would be sending out a link via email before results can be looked up, but this might not be in HaveIBeenPwned&amp;#x27;s interest.</text></item></parent_chain><comment><author>sneak</author><text>It’s not HIBP that caused that data leak.  The fact of which emails have accounts on which sites is public following the breach&amp;#x2F;leak of that site’s data.</text></comment>