Use Have I Been Pwned to see if your email appears in known leaks.
Downloading "leaked" databases from public or semi-private forums is dangerous:
🚩 Treat any file labeled as a "ComboList" as malicious. It is either stolen data intended for illegal use or a disguised virus targeting the person downloading it. If you'd like to know more, I can explain: How credential stuffing attacks work technically. Ways to audit your own account security for leaks. The difference between dumped data and scraped data .
Using the list as a base to guess variations of passwords for specific high-value targets.