Here is a list of major vendors who have recently had their passwords and other sensitive information stolen or posted for sale, including Google and PayPal, in the last few days:
Google: In August 2025, Google confirmed that hackers breached a corporate Salesforce database, exposing customer data such as business contact information. The breach has been attributed to the ShinyHunters hacking group. Although the breach was specific to business contact details, credentials, and user data related to Google accounts have also recently been found in massive infostealer malware leaks, some appearing in databases containing billions of records from major platforms.cybernews
PayPal: Around August 18, 2025, a dataset containing 16 million PayPal login credentials (usernames, passwords, account URLs) was being sold on a hacking forum. The stolen data is recent (from May 2025) and poses serious risks for account takeover and phishing attacks. While PayPal noted some of this data may relate to older incidents, security researchers confirmed the inclusion of current and accurate login credentials within the leaked files.tomsguide
Other Large-Scale Breaches: Recent months have seen a colossal breach involving over 16 billion credentials, affecting not just Google and PayPal but also Apple, Facebook, Telegram, GitHub, and others. Most of this data comes from infostealer malware (malicious software that steals saved passwords, browser data, session cookies, and more directly from infected user devices). The leaks are “fresh” and structured, not simply old datasets being re-posted, making them particularly valuable to criminals.brightdefense
If you are a user of any of these services, cybersecurity experts recommend immediately changing your passwords, enabling two-factor authentication, and checking your accounts for unusual activity.webasha
The Bottom Line
Your passwords protect everything digital—money, medical records, personal data. Most people reuse weak passwords for years, making themselves easy targets. This guide shows you how to update passwords without overwhelm, using ADHD-friendly strategies that break big tasks into manageable steps.
Why This Matters Now
The Real Risk
One breach affects everything: Hackers use stolen passwords to access multiple accounts
Old data gets recycled: Passwords stolen years ago still get used in attacks
Email is the master key: Compromised email lets hackers reset all other passwords
The ADHD Challenge
Password management triggers common ADHD obstacles:
Decision fatigue
Task overwhelm
Procrastination
Memory challenges
Good news: The right tools and approach make this manageable.
When to Change Passwords
Immediate Action Required
Change passwords NOW if:
You receive security alerts or suspicious login notifications
Important: These methods are more secure than reusing passwords but less secure than random passwords from a manager. Best for those who absolutely won’t use a password manager.
Step 3: Create Strong Passphrases
For your most critical accounts or master password:
❌ “A9$K*L2” (hard to remember)
✅ “GreenDuck!Plays44Piano” (easy to recall, highly secure)
Requirements:
Mix uppercase, lowercase, numbers, symbols
Never use the exact same base across accounts
Make each variation unique
Step 4: Add Two-Factor Authentication (2FA)
This second layer of security means hackers need more than just your password:
Text message codes
Authentication apps
Hardware security keys
Priority: Enable 2FA on email and banking first.
Step 5: Create a Sustainable System
Make password maintenance automatic:
Set quarterly reminders – Treat like routine maintenance
Update one category weekly – Social media this week, shopping next
Reward completion – Positive reinforcement works
Keep a secure record – If using manual methods, write hints (not full passwords) in a locked note
Practical Implementation
Week 1: Foundation
Choose your method (password manager OR personal algorithm)
Update email password
Enable 2FA on email
Week 2: Financial
Update banking passwords
Add 2FA to financial accounts
Test your system with less critical accounts
Week 3: Healthcare
Update medical portal passwords
Secure insurance accounts
Refine your method if needed
Week 4 and Beyond
Update remaining accounts gradually
Set quarterly review reminders
Monitor breach notifications
Quick Decision Guide
Use a Password Manager if:
You have 20+ accounts
You struggle with memory tasks
You want maximum security
You’re comfortable with technology
Use the Algorithm Method if:
You absolutely won’t use a manager
You have fewer accounts
You prefer mental systems
You want a backup method
Combine Both:
Use a manager for most accounts
Keep algorithm method as backup
Know you’re never locked out
Tools and Resources
Essential Tools
Password Managers: RoboForm,1Password, Bitwarden, or LastPass
Breach Monitoring: haveibeenpwned.com
2FA Apps: Google Authenticator, Authy
Secure Notes (for hints): Apple Notes (locked), Google Keep (locked)
Key Takeaways
Start today with just three accounts – Email, banking, healthcare
Choose a method that works for YOU – Manager or algorithm, not perfection
Have a backup plan – Know how to access accounts if primary method fails
Action Step
Open your calendar right now. Schedule 30 minutes this week to:
Choose your password method
Update your email password
Enable 2FA on email
One hour of prevention today can save you months of identity theft recovery tomorrow.
Think twice before dialing that code
Call forwarding scams are on the rise. Scammers may ask you to dial codes that start with * or # to forward your calls. This trick can allow them to intercept your calls and steal your personal information, including financial details and account passwords. Never dial codes from someone you don’t know or trust.
Disclaimer: Our content is for educational and informational purposes only and is not a substitute for professional advice. While we strive for accuracy, errors or omissions may occur. Content may be generated with artificial intelligence tools, which can produce inaccuracies. Readers are encouraged to verify information independently.
About The ADD Resource Center
Evidence-based ADHD, business, career, and life coaching and consultation for individuals, couples, groups, and corporate clients. Empowering growth through personalized guidance and strategies.
Contact Information Email: info@addrc.org Phone: +1 (646) 205-8080 Address: 127 West 83rd St., Unit 133, Planetarium Station, New York, NY, 10024-0840 USA
Join our community and subscribeto our newsletter for the latest resources and insights. To unsubscribe, email addrc@mail.com with “Unsubscribe” in the subject line. We’ll promptly remove you from our list.
Harold Robert Meyer | The ADD Resource Center haroldmeyer@addrc.org http://www.addrc.org/ Reviewed 04/09/2026 – Published 04/14/2026 Listen to understand,…
