I put my old Gmail accounts on websites like haveibeenpwned.com osintleak.com pentester.com and osint.industries
And the results had a lot of personal info like old usernames I used, old passwords, IP addresses and other info
What can I do now?
I deleted all of my old Gmail accounts. I changed all of my usernames everywhere or deleted the accounts associated with them and changed all the passwords. I use Proton and Email aliases when signing up for services and random generated passwords with fake info everywhere(if possible) and I do use a VPN on all of my devices.
Is there anything more I can do?
Because those Emails had my full real name in them and I used them literally everywhere.
Something I haven’t seen mentioned yet - if you’re in the US, lock down your credit at all 3 agencies. It takes 10-15 minutes and is free, it’s easy to do.
The issue is that many of these leaks include things like your full legal name, phone number, parents’ full legal names, your social security number, and your entire address history. This makes it trivially easy for somebody to steal your identity and start opening up credit accounts in your name. You need to lock down your credit before that happens. If you need your credit run in the future (opening a bank account, getting a credit card or loan), just ask them which agency they pull the report from and temporarily unfreeze it so they can run the report, then re-freeze it when they’re done. It adds 5 minutes of work once or twice a decade, but could be priceless later on when someone tries to steal your identity.