Just let that number sink in a bit. 80M/2844 = ~30K accounts / breach.

And still, just about every service that you have to make use of (your HOA, your insurance company, your government and so on) wants you to trust them with your data secured by a userid and a password that they will administer on infrastructure that they are most likely not competent to secure.

One of the best things to come out of the GDPR is the reporting requirements for breaches. You can expect a lot more of these updates in the future.

Edit: interesting, the link now goes to 'https://ghost.org/fail/', a 404, so go to https://www.troyhunt.com/