A breach alert may indicate that an email address or associated data appeared in a known incident. It does not necessarily mean an exchange account or wallet was accessed, but it is a prompt to secure reused credentials and recovery channels.
Secure the email account and reused passwords
Change reused passwords from the official service, enable a phishing-resistant second factor where possible, review active sessions and forwarding rules, and secure the email provider’s recovery options.
Change any password that was reused
Unique passwords stop a breach at one site from being used as a login elsewhere.
Check exchange access through the official app
Visit the exchange using a saved or independently verified address, inspect login history and API keys, revoke unknown sessions or credentials, and contact support through official channels if you see suspicious activity. Never share a seed phrase or one-time code with a caller or message.
Never disclose one-time codes or recovery phrases
Legitimate support should not need a wallet seed phrase or authentication code.
Sources
Educational information, not investment advice.