If all it takes is someone to download one of the countless publicly-available-on-github plaintext password compilations and automate login attempts to require

If all it takes is someone to download one of the countless publicly-available-on-github plaintext password compilations and automate login attempts to require a company to file a breach notification, I think all of the top services in the world would have to file one every hour.