When I got the email from Eventbrite, my first thought was "oh cool, nice to know they're taking these things seriously", closely followed by "wait, this is really creepy". Still not sure if this is a good thing or not.
Really curious what proportion of large password breaches we actually discover...