I came across an old (>3 years) accounts information list which has been leaked to the web. The list included thousands (>10.000) of account details from a service or services. Apparently the event was a small-scale news item back in the days, so there's not too much to do now, even if the one page I found would be removed from the web right now.
However the list included my account name and hashed password which could be easily decrypted to plain text. I haven't used the password for years anymore, but I still use a rather similar one on some websites. I also use the account name every now and then. I haven't come across anything suspicious on my accounts for what I remember.
My question is what should I do to prevent any possible upcoming harm?
I'm unsure of what should I do. I guess I should have a thought of at least these things:
- Other accounts using the user name and/or (similar) password
- Search-engines - is there any way to globally remove the page/pages appearing on searches?
The hashing algorithm was poor and one of the most used, so that can be ruled out. I did the decrypting within a minute.I have most likely been using wrong terms here and there as I don't an information security background.