I am trying to decide if my compromised accounts ('Security credentials leak') matter. The most important one is Gmail. They have pretty rigorous anti-spam measures, so even if someone can log into it (has never happened), they can’t do much with it. I also get a dozen warnings from them every time I log in from a different IP. I only use Gmail as a back-up. The password is not used anywhere else. Should I bother changing it?

The other is my Dutch account, mostly unused these days. Back in the day, I used the password on various other services, none of which I still use. I can’t see any way in which unauthorised access to these accounts could cause a problem. I suppose a hacker could say nasty things under my login or send obscene posts to contacts from my email account, neither of which would bother me much. Am I missing something?