I’m very careful with privacy and security so I was surprised I got an obvious phishing email from “American Express”. I reported the email and moved on only to get another one today. I checked haveibeenpwned and it came back clear. I have never gotten a phishing email before the other day. As for the senders, they all came from generic IT sounding email addresses. They obviously weren’t American Express.
Could just be bad luck, dude. I have a bunch of emails that I never use for anything, just forwards to my main. One of them is spammed constantly. It wasn’t breached, I never signed up for anything using it.