It used to be that I wasn't surprised when my password app would tell me an account is compromised.

Now I'm surprised, often. Accounts with good generated passwords I get warnings about.

Not that that vendor or site ever tells me they were hacked, but it's one of those cases where I can't imagine how else it ended up on a list somewhere ...

Not plain-text I hope. Was this extracted directly from providers? Given the fact that people reuse passwords, it should be easy to construct a larger db theoretically. But this number is mind-boggling.

I wanted to ask if it's already available at haveibeenpwned but it only lists 14B records as of today

it lists 15 billion accounts, one account can be linked with many passwords

thats about 2 accounts for every person on the planet already..

my email address comes up in 23 breaches, and it doesn't appear to list that one yet.

So no, I dont think it has been added yet, but it will be interesting to see how much that number goes up when they do.