xkcd: 562k Accounts breached according to haveibeenpwned

I wonder how many of those passwords are correcthorsebatterystaple

I&#x27;m one of them :&#x2F;<p>The haveibeenpwned description says password hashes are md5, which sucks. But phpBB has used bcrypt by default since version 3.1 (2014)... I wonder if all the hashes are md5 or only those for older accounts?<p><a href="https:&#x2F;&#x2F;haveibeenpwned.com&#x2F;PwnedWebsites#XKCD" rel="nofollow">https:&#x2F;&#x2F;haveibeenpwned.com&#x2F;PwnedWebsites#XKCD</a>

This sucks. But on the bright side, we can expect an XKCD comic about it in the future.

Who has an &#x27;account&#x27; with xkcd? Confused.