Look up your address on haveibeenpwned.com, the free service run by security researcher Troy Hunt. For each breach it lists, Zcan’s Breach Guide explains what actually leaked and walks you through what to do, in order.
Breached emails get targeted phishing and password-guessing. Knowing which breach it was tells you what the attacker may know about you.
Have I Been Pwned is the trusted source and you can use it directly, so your address doesn’t need to pass through another service.
No. Tell it which service was breached, or paste the notice you received.
If you reused that password anywhere, yes. Old breach lists are still used for credential stuffing and phishing.
