[Moltke]

Thankfully, there is a useful website called www.haveibeenpwned.com created by Troy Hunt as a free resource for anyone to quickly assess whether their email credentials may have been compromised in a corporate data breach over the past several years.

And I know I can trust that "free" service how, exactly? I go there and put in my personal data? Have you done that yourself? Seriously, isn't that the typical M.O. of a scam built upon a scam? Not going there anyway.

[justa-hairyape]

Just typed in my email addresses. No other data needed.

[cynwoody]

And I know I can trust that "free" service how, exactly? I go there and put in my personal data? Have you done that yourself? Seriously, isn't that the typical M.O. of a scam built upon a scam?

From the site's FAQs:

How do I know the site isn't just harvesting searched email addresses?

You don't, but it's not. The site is simply intended to be a free service for people to assess risk in relation to their account being caught up in a breach. As with any website, if you're concerned about the intent or security, don't use it.

What changes in the site's operation would you suggest?