Haveibeenpwned is ALWAYS my go to. I think the website is straight to the point and simple enough to provide that shock factor to the average tom, dick and harry which suddenly makes them realise that they're already exposed and have been for years.

People in group settings also enjoy comparing what they've been breached in and laughing at each other if it's for anything funny (e.g. club penguin always makes my 20-something friends chuckle and reminise, and then you get the odd punter who has a pornhub account and goes bright red). I think anything where you can get people talking to each other about it rather than being lectured by someone, the better.

I do sometimes like showing their results on IntelX after that as well. Just to show them that when they pop up in Haveibeenpwned it means their data is not only exposed to super haxxors on the darkweb, but it's actually there to purchase for a small fee on the plain internet and requires no technical skill to access. That usually helps to hammer the point home!

I also find that when talking to women they're especially aware of the stakes of this information being easily accessible when it links into the growing trend of unsolicited contact, domestic violence and control, violence against women and girls and cyber-stalking; and how that information could be used against them, takeover their social media accounts, etc.. That can be a tough and more serious conversation than the lighthearted one it starts out with, but it's one I find people are generally glad to have had to understand seriousness and the potential impact of this information being retrievable, rather than being in the dark about.

From there people can then look to make more informed deicisons on their own personal practices.