Our first reaction is to change the password. But that means nothing if you haven’t secured your device first.

This isn't just "another data leak."  This is 16 billion passwords and usernames that are left out in the open online, and most people won't even know they're affected until something goes wrong.