A few days ago I got an email from a hacker supposedly using an email of mine (he was using the same email address TO and FROM) from my own email domain, and had a part of a password I use to purchase items with this particular email but not the one associated with the email server at HostGator, and threatening me with bogus claims and demanding a ransom.
I used haveibeenpwned and resulted in 7 sites (i.e. Linkedin hacks) and 1 paste. I read your sites answers and Troy's info but do not understand how to proceed. I am a small biz man and not a coder.