Hold Security

In one of Bruce's most interesting posts, he goes into detail on the discovery of hacks done to steal passwords and accounts noted by a company called Hold Security. I must admit to having doubts about this whole thing, but Bruce, as usual writes his down.  Worth the read.
 https://www.schneier.com/blog/archives/2014/08/over_a_billion_.html#c6676010