Your personal information has fallen into a scammer’s hands, and your first instinct might be to change every password you own. Resist the urge to spend the next three hours resetting accounts while forgetting the one that matters most. Your first move should depend on what the scammer obtained and what they could access with it.
A stolen email password creates different risks than a leaked Social Security number. Someone who grabbed your debit card details may try to spend your money immediately, while someone holding your personal information could attempt identity theft later. You need a plan that matches the exposure, not a frantic tour of every security setting on your phone.