Reply to post:

@mark jacobs

You seem to have a misunderstanding of the "breach".

Thieves used valid usernames and passwords leaked from other sites, not from the HSBC site, so whether HSBC salted their hashes or used HTTPS is irrelevant.