Data breach notification site Have I Been Pwned notified 1.1 million customers of a July data breach, a number not previously reported.