In case you didnt see yet:
https://haveibeenpwned.com/Someone aggregated the data of all database hacks of the past years - you can check if your email and pw is under it.
wow, this is a great site for spammers to collect active email addresses.

edit: most likely this site is trustworthy, it's just my paranoia