I do the same, and so far I've had two leak through: 1. keen.io when they sold to a PE firm 2. 1password - we're not sure why this one happened, 1password's se

I do the same, and so far I've had two leak through: 1. keen.io when they sold to a PE firm 2. 1password - we're not sure why this one happened, 1password's security team worked with me to dig into it and it's likely that the name I used was just too generic and landed on a keyword list.