HIBP and my password manager both claim that a password that I am using has been seen in a data leak. Neither of them provide information about which data leak exactly my password was seen in.
The password is complex and not reused, and I have been using it with a company that has all kinds of my info, including SSN and financial information.
This company has not notified me of any data breaches, which I believe is against the law for them to knowingly conceal--if the password indeed came from my account with that company and not from some other person by some wild coincidence.
How can I verify where my password got leaked from? Are there any checkers that pinpoint to a specific leak/breach (similarly how HIBP points to who your email was leaked by)?