Forgive me for not understanding, but assuming you use unique passwords on every account/website, and get a breach notification, wouldn't that breach password only be on that one website/account and would thus take nowhere near 6 hours?
What am I missing?