CreditKarma Reports my info was breached from seochat

A weird notice I received today from Credit Karma. I recognize this is from 2016. But I saw the notification for the first time today.

Quote: breach

July 1, 2016

In July 2016,’s database was allegedly breached. Even if you don’t use your account anymore, it’s important to protect any info that was exposed.
Exposed info


Your password was exposed in this breach, but we don’t know what it is.

After reading that, I came here to change my password only to get notifications that the site is not secured. A basic of SEO is to use SSL. Google recognizes that. What’s going on?