According to the email I just got from HIBP...
> Dates of birth, Email addresses, Employers, Genders, Geographic locations, IP addresses, Job titles, Names, Phone numbers, Physical addresses
WTF of the highest proportions. Who are these people? This seems to me like a violation of all seven principles of the GDPR.