Cloud Threat Alert: XposedOrNot Hacked Via Insider Stealer

I've been running XposedOrNot for years now. The pitch has always been simple: type in an email, find out if it's turned up in a data breach. Free, no signup, open source. Millions of lookups later, it still does exactly that. But I've had a nagging feeling for a while that we were only answering ha