Yes, "Have I Been Pwned" service is completely legit. This source helps you identify if your data has gotten used without your knowledge. Today, you can never be too careful. Considering data breaching incidents can affect hundreds or thousands of email accounts at once, it is difficult to track where your data and information get used. So, using a resource like "Have I Been Pwned" helps you maintain a handle on your information and who may have access to it.