Originally Posted by quantumslip

Looking at the alerts the length of the password is not fixed across all alerts but varies. I see the shorter ones from earlier alerts that are referencing sites and password on which I knew I used some pretty crappy passwords. As newer sites get hacked/compromised I'm starting to see more of the longer passwords show up in my alert list.

The email and not my FF being leaked did give me pause, but it could have been how the data was packaged for sale in the dark web. Either way I've already changed my United password, and will monitor the rest.