Hackers are going through lists of hacked password lists and automated test of each entry, causing tons of gmail/outlook/amazon/paypal/ebay/etc emails.

One way to protect yourself is use a different email address, and only for services. Many email sites allow custom addresses, so you can create specific emails addresses for each service.

And if your cellphone number is also leaked, get a sms service with a different phone number.

https://haveibeenpwned.com and you can do a check on yourself.

I find it sad Google sells titan keys but ignores them on login.