haveibeenpwned has a copy of the data and has sent notifications to those that have subscribed