What data does this send and who receives it?
Is money involved in this partnership? If so, who paid whom?
What was the motivation behind this? Is there any study that shows any benefit from haveibeenpwned.com? I.e. has there been a decrease in hijacked accounts, etc?