I always worry that sites like #haveibeenpwned are just aggravating the problem by collecting info on people who think they've been pwned and so likely have weak and re-used passwords. !security
@bobjonkman I received a "update your password" email from them a few days back. Changed it. Then today I read about how large the thing is. So, did a check. I don't even use Dropbox. I set it up way back when just to make an audio file easy for friends to pull in for their podcast... what, 5 years ago now! Oo