Use services like Have I Been Pwned to check if your corporate domains appear in recent leaks.
Recently harvested and not yet saturated or widely used. 79k UHQ germany Base.rar
While every .rar file is different, these "bases" typically contain combinations of: Email addresses and hashed (or plain text) passwords. Usernames paired with regional metadata. Use services like Have I Been Pwned to