June 19, 2019
3:47 p.m.
More context: Donald wrote a blog post soon after this announcement https://caremad.io/posts/2018/08/pypi-compromised-passwords/ with some statistics.