Over the years a number of internet sites have been compromised, this continues today.
If your details were borrowed from any of these places then they have copies of older passwords which is why you need to change them with some regularity.
You can go to:
https://haveibeenpwned.com
Enter your email address and it will search a list of known compromises that affect you.