https://breachalarm.com/ https://haveibeenpwned.com/
The author does not seem like the type of person who did the hacking himself to obtain these, but rather curated leaks into his database