It's hard to say definitively how old this data is due to this being a partial breach, but at one time I had two separate login email addresses for facebook.
Email address A was a gmail address and is a single dictionary word. I moved away from it as a login email due to the tendency of people to blindly spam it and it being used as a throwaway email address when people sign up for accounts. At this point I've had to purge a half dozen accounts people created on Facebook using my gmail address. The most recent one was created 4 months ago. Due to a rapid succession of logins (South Africa and United States) geometrically far apart, it was flagged and disabled.
I started using a different email address for my Facebook login a little less than 2 years ago. It is a custom domain name.
Neither showed up in the Have I Been Pwned lookup tool under this Facebook breech.
Email address A was a gmail address and is a single dictionary word. I moved away from it as a login email due to the tendency of people to blindly spam it and it being used as a throwaway email address when people sign up for accounts. At this point I've had to purge a half dozen accounts people created on Facebook using my gmail address. The most recent one was created 4 months ago. Due to a rapid succession of logins (South Africa and United States) geometrically far apart, it was flagged and disabled.
I started using a different email address for my Facebook login a little less than 2 years ago. It is a custom domain name.
Neither showed up in the Have I Been Pwned lookup tool under this Facebook breech.