Unfortunately, breaches like these are becoming all too common. Anyone who has an account at any of the services listed above should change their password on that site and any other site that uses the same password. If a work email address was used to create an account on any of these sites with the same or similar password that can be used to remotely log on to work computers, that password should be changed immediately. Attackers often use stolen databases of passwords from third-party breaches to perform “password stuffing” attacks against companies. One method of protecting oneself is to use passwords that are unique to the login and increasingly complex through the use of numbers, uppercase and lowercase letters and special characters. To help with organizing all the different passwords there are a multitude of password managers available that organize and protect credentials. It is suggested that the password manager only keeps your data locally. This way if the company that supports the program is breached, your data will not be included in the breach. Binary Defense provides Counterintelligence services for clients that includes monitoring third-party data breaches and notification of employee accounts involved, so that passwords can be reset quickly after a compromise.

To read more: https://www.bleepingcomputer.com/news/security/seller-floods-hacker-forum-with-data-stolen-from-14-companies/