A pop-up from a purported hacker claimed the archive had suffered a “catastrophic security breach” last week, before Have I Been Pwned confirmed data was stolen. The theft included email addresses, screen names, hashed passwords, and other internal data for 31 million unique email accounts.