> fantastic use case

How does it work?

If a company to which you have provided an email address, gets compromised, it's likely that you'll start getting automated pishing emails to that address? And that the address ends up in... some "warning" database like Have I Been Pawned, and you'll get notified?

Or something else?

Seems like a good idea :-)