Sources are mentioned in the FAQ and top page: https://shouldichangemypassword.com/sources.php

It's checking the e-mails on those databases.