In addition to changing passwords (one unique and complex password per site), now is a great time to simply delete accounts that you no longer use.
(similarly and a major peeve - vast majority of signup verification emails do not have a "no this is NOT me that signed up, delete this email" option! My email gets misused a lot in some countries where my name is common and I have no easy recourse to deny it)