You use the same password for your email, your bank app, and a clothing website you signed up to a few years ago. The clothing website gets hacked and your password is stolen. What is the most likely risk to you?

When a password is stolen in one breach, criminals do not stop there. They run it against other popular sites and apps automatically. This works because so many people reuse the same password across multiple accounts. The clothing site breach is the starting point, not the end point. Your email and bank accounts are at risk the moment that password appears in a stolen list, whether or not those companies were hacked directly.