1. Change your password and enable 2FA immediately.
2. Revoke suspicious sessions and tokens.
3. Monitor financial accounts and set alerts.
4. Rotate other accounts using similar credentials.
5. Consider a credit freeze if PII was exposed.