I've verified some of the reported breaches myself (from publicly available password dumps). It's not a 100% given that those matching means it's all good, but it's a pretty solid indication.