And this isn't complete and utter bullshit? My e-mail address (after requiring JS and cookies) was allegedly found in an collection of avatars ... I'm sure it's now in a collection I rather not have it in.
Well, for the record, google confirmed that my e-mail address (and other PII) was found in the other two listed breaches, but didn't know about those avatars either.