* Note 2 - 26 July 2020, United States of America: no updates were received today prior to the data cutoff time, thus regional and global totals for new cases and deaths are substantially reduced. The figures will be adjusted when data are available.
Wouldn’t an attacker only have to manage to bruteforce 2 of the hashes in order to discover this pepper, which would just be the text that is common between them?
Time to start scraping state/county data?