Although this was downvoted, I suspect some companies are not reporting their breaches or they do not know about them.

My most recent was EpicGames, which Have I been Pwnd (Password page) says my password has not been pwned. But it was pwned, and was used to access my Gmail, EpicGames and other sites.

I'm not sure what can be done - I think people like me can help collaborate in a way that can lead to discovering unreported breaches and whistle blow those companies to notify their users of breaches.

Why do I have to become a hacker to keep myself safe? Makes no sense.