Hacker News Reader

Where do the lists added to HIBP come from? I can't imagine HIBP is paying these characters on BreachForums or wherever they're sold.

Troy gets sent some of the data, and some of the breaches come along with good story. Even the FBI has provided some data for HIBP.