Hacker News Reader

Are the patient emails real patients or could they be test accounts?

The emails are definitely real, I checked a few and they appear in HIBP.

They look like real people's email addresses. I checked a few. They belong to real people.