I was contacted by Troy Hunt, Microsoft MSFT +0.50% MVP and owner of, a website that sucks in email addresses from significant breaches so users can quickly check whether their data was compromised. Hunt informed me he’d been contacted by an anonymous source who’d passed along a database allegedly belonging to 000Webhost, containing usernames and passwords ostensibly belonging to just more than 13.5 million users. They didn’t appear to have been leaked online before and the database looked legitimate
This may be of importance here since many starting web devs (including myself) started out with a "FREE" web-hosting account with them. Please out to see if your email was apart of this or other security breach (mine was).