So this is interesting - I searched a fairly unique password I used for access to Salesforce.com and it shows as breached. I’ve never used it elsewhere, so either someone else had that same very random password, or some of this is Salesforce.com data.