Have I Been Pwned has added 124 million passwords and 56 million email addresses from infostealer logs tied to infected devices.