A massive trove of 361 million email addresses from credentials stolen by password-stealing malware, in credential stuffing attacks, and from data breaches was added to the Have I Been Pwned data breach notification service, allowing anyone to check if their accounts have been compromised.
With a dataset this large, no site that allows logins is unaffected by these leaked credentials
That’s a third of a billion