Yes, that is true but once your password or personal data is in any of these data breaches it doesn't matter how many characters you used, your password will be leaked in forums.