@misc{breaches-pwd:arxiv20,
  author =       {Sruti Bhagavatula and Lujo Bauer and Apu Kapadia},
  title =        {{(How)} {Do} people change their passwords after a breach?},
  archivePrefix = "arXiv",
  eprint =       {2010.09853},
  primaryClass = "cs.CR",
  year =         2020,
  month =        oct,
  url =          {https://arxiv.org/abs/2010.09853},
  howpublished = {arXiv preprint 2010.09853},
  keywords =     {privacy, human factors},
}