Allow challenging of unrealistic results...
I have a small private domain used just for my family, which has 5 mailboxes and at most a dozen email adresses including role accounts like security@ or postmaster@ - yet HIBP tells me I need to sign up for Layer 3 subscription as I apparently have 128 breached accounts.
Clearly there is something wrong, but there's no way for me to even see what's wrong because I don't have a subscription. There must be some error in the HIBP database, but there's no way for me to check or even to ask someone to check it...
Juergen Nieveler
shared this idea
Assuming that is excluding spam lists, that shouldn’t be possible unless the domain name is something that regularly appears as part of another string and has been parsed out incorrectly. Log a ticket with the details and I’ll look into it: https://support.haveibeenpwned.com/hc/en-au