I had a personal data breach ping on my dark web monitoring... Some of my personal data including an old email and password, address, and phone number( the usual data they get when they breach a badly programmed totally insecure web site or storefront etc... that was storing passwords in an insecure format ) was exposed in the middle of March 2020.
That's not exactly an uncommon or unexpected thing. These things get exposed from old breaches, and then are collected and aggregated to build password cracking dictionaries and do datamining etc... and eventually they often get released into the wild.
What's amusing though, is that it's a 20 year old email, password, address and phone number, from when I lived in Fremont, CA.
I left Fremont and moved to Ireland in 2001.
Remember... Everything is forever on the internet.