In the past I have recreated the Maltego Graph of all breached sites/names and domains and when I have pushed this to GitHub another breach has been loaded on the same day by a tweet from https://twitter.com/haveibeenpwned

Can you publish a counter estimating when the next series of breaches will be made available?

I understand that breaches may be loaded concurrently and/or urgently, etc. Neither am I asking for you to publish the name of the website that you are confirming has been breached, etc

Can you describe what the intended use of the LogoType field in the Breach object is? I can't find anything in the API docs that describes the field. I know what SVG and JPG are, but to what do they refer? Do you have (or plan to have) an API that will return a logo for the name of a breach? I can see from the source of your web pages that you have that data in the content folder

Can you add an enhancement to https://haveibeenpwned.com/Passwords which is https://haveibeenpwned.com/Passwords/[Password/SHA-1] similar to the "account" URI such as https://haveibeenpwned.com/account/christian.heinrich@cmlh.id.au please?

I used to lookup password hashes by a binary search in the sorted password list (iterating over the initial database and the 2 updates).

With the new database 2.0 this is no longer possible (unless I sort the downloaded hashes).

Please bring back the sorted hashes.

I do not care for the counts that have been added - perhaps another file with sorted hashes and without counts (to somewhat reduce the file size) could be offered for download?

Does it mean that the e-mail adress was hacked, but that the associated password was not decrypted? If not, why the password is not found in your database? Thanks.

I've changed my password but my mail remain in the list. When my account will be "pwned" again, I will not know about it.

You should take a look at gmail adresses with . in them. For my email firstnamelastname@gmail.com returns as pwned but firstname.lastname@gmail.com returns as clean. For gmail these adresses are exactly the same and I use both of them.

I don't know if this is already available, but I feel it will be a better idea.

i know this might be outside the scope of this site

But i have in the past discovered that sites do not delete me when i ask for it

It could be nice to have some sort of crawler that could search the internet for your username or even name and report back on which sites they are found

this could maybe be a seperate site

I have found a number of PowerShell wrappers to the API, and some text hashing scripts, but the hashing does not seem to work when used to hash a known bad password and send it via as SHA1 via the API. Example javascript and/or PowerShell scripts (and maybe others) to show how the hashing should be done, would allow all calls from apps, etc. to use the SHA1 value and not send the "clear" password (even over HTTPS) to the API.

Cloudflare antibot on your api doesn't make any sense, i have a python discord bot with your api implemented and because of cloudflare i cant use the api anymore and i have quite a few users who use the function.

Tell the simple steps to get out of these problems who does not know the technology, how to get out of pwning his/her email or some other account. Dr N C Ghatak.

the listed date - "(1 Jan '01)" is, shall we say, an out-of-bounds error. Site didn't exist that long ago!

The files version 1, update 1 and update 2 contains 320,3355,236 SHA1 values but only 320,294,464 are unique the difference are 40,772 values

Provide Solutions on "How To" reverse the process of compromised email address and passwords.

Oh no — pwned!
Pwned on 4 breached sites and found 1 paste (subscribe to search sensitive breaches)

Otherwise, users of bitcoin could be targeted in order to steal their bitcoins (as they are worth so much right now).

subject says it all...