Not OP but removing the hash will not really help, even if you've used the same password on multiple sites, because the attacker would need to know which hash was used to sign up for other services.

Compromised [email protected]:mypassword won't help getting into my account at somewebsite that is registered to [email protected]:mypassword.

And, I suppose, it forces you to use a password manager, because there's no way you're remembering the email, even if you're using the same password ;)