Figured out my "strong" password was sitting in a breach dump from 2019
Signed up for a Have I Been Pwned alert on a whim last Tuesday and got an email saying my main email and that old password showed up in a LinkedIn breach from 2019, so I spent that night changing it on 23 different sites and turning on 2FA everywhere I could.