To do something similar as an individual, I highly recommend 33mail.com [1], which provides a generous free tier, and lets you supply arbitrary <companyname@yourdomain.33mail.com>. As well as knowing where a leak originated, you can easily block any inbound email address if it is being abused.
Not affiliated, just a happy long-time paying customer.