Troy Hunt

As part of his work administering the Have I Been Pwned? (HIBP) website, Hunt has been involved in the publication of 644 data breaches as of 6 January 2023^[update],^[7] and journalists cite him as a cybersecurity expert^{[8][9][10][11][12][13]} and data-breach expert.^[14][15][16]

As of June 2018^[update] HIBP had recorded more than 5 billion compromised user-accounts. Governments of Australia, United Kingdom^[17] and Spain use the service to monitor their official domains.^[18] Popular services, such as 1Password,^[19] Eve Online, Okta^[20] and Kogan, have integrated HIBP into their account-verification process.

Gizmodo included HIBP in its October 2018 list of "100 Websites That Shaped the Internet as We Know It".^[21]

In August 2015, following the Ashley Madison data breach, Hunt received many emails from Ashley Madison members asking for help. He criticized the company for doing a poor job informing its userbase.^[22]

In February 2016 children's toy-maker VTech, who had suffered a major data breach months earlier, updated its terms of service to absolve itself of wrongdoing in the event of future breaches. Hunt, who had added the data from VTech's breach to the databases of Have I Been Pwned?, published a blog post harshly criticizing VTech's new policy, calling it "grossly negligent".^[23] He later removed the VTech breach from the database, stating that only two people besides himself had access to the data and wishing to reduce the chance of its spread.^[24]

In February 2017 Hunt published details of vulnerabilities in the Internet-connected children's toy, CloudPets, which had allowed access to 820,000 user records as well as 2.2 million audio files belonging to those users.^[25][26]

In November 2017 Hunt testified before the United States House Committee on Energy and Commerce about the impact of data breaches.^[27]

Also in November 2017 Hunt joined Report URI, a project (launched in 2015 by Scott Helme) which allows real-time monitoring of CSP and HPKP violations on a website. He planned to bring funding and his expertise to the project.^[28][29]

 

Hunt is known for his efforts in security education for computer and IT professionals. He has created several dozen courses on Pluralsight, an online education and training website for computer and creative professionals. He is one of the primary course authors for Pluralsight's Ethical Hacking path, a collection of courses designed for the Certified Ethical Hacker certification.^{[5][non-primary source needed]}

Additionally, Hunt works in education by speaking at technology conferences and running workshops. His primary workshop, titled Hack Yourself First, aims to teach software developers with little security background how to defend their applications by looking at them from an attacker's perspective.^[30][31]

• 2011–present: Microsoft MVP for Developer Security^[32]
• 2016–present: Microsoft Regional Director^[33]
• 2018: AusCERT's Individual Excellence in Information Security award^[34]
• 2018: Grand Prix Prize for the Best Overall Security Blog, The European Security Blogger Award^[35]

•   Media related to Troy Hunt at Wikimedia Commons
• Official website