So my most-breached e-mail address (a hotmail address from 17 years ago that I basically use for stuff I know will send me spam) has 3 or 4 newly-added breaches.

  2,844 Separate Data Breaches (unverified): In February 
  2018, a massive collection of almost 3,000 alleged data 
  breaches was found online. Whilst some of the data had 
  previously been seen in Have I Been Pwned, 2,844 of the 
  files consisting of more than 80 million unique email 
  addresses had not previously been seen. Each file 
  contained both an email address and plain text password 
  and were consequently loaded as a single "unverified" 
  data breach.

  Compromised data: Email addresses, Passwords

The problem is I have no idea what this breach is sourced from, so I don't know what account in particular was affected. Not Troy's fault, obviously, but it's basically just telling me, "Your e-mail address and a password to somewhere was found online somewhere." For all I know it's recycled data from a breach I already know about.

At this point it's not really a big deal. I use a password manager and they're all random at this point, so I just need to figure out which one to rotate.