My email address has already been breached on three different services. The previous two were sites that I've used once and never again, this one I obviously never heard of until today, when the breach happened.

Even though I use a password manager and unique passwords, I still get the shills whenever I see an email from the HIBP domain.

It's just something that makes me feel uncomfortable, even though I know that the breach is specific to a site that I have never used frequently and doesn't affect any of my other profiles.

Then imagine how hard my heart dropped when I was taking a summer nap and suddenly Google notified me (through my Android phone) that some suspicious login activity was taking place in my main mail account. The panic!

Yes, I reused my Gmail password in $pwnd_service. Bad idea.

Fortunately Google managed to detect the unusual activity and lock them out, but maybe others aren't that lucky. That event led me to finally use a password manager and stop reusing passwords everywhere.

What an afternoon, trying to change password from all services I could remember. Can you remember all services you signed up for with your email? Cause I definitely didn't.

Quite a humbling experience.

No kidding, definitely an "oh shit" email.