While it's not much help after the fact. There are plenty of email services that will give you a forwarding email address. That way if a "hacker" ever dumps your email address, you just disable that email address and move on. Burnermail https://burnermail.io/ is a good service. There are others as well. I suggest doing research and finding the best for you.
But Basically, you can create say [email protected] (or their domain) and have it forward to your actual email address. Then if that email ever gets leaked, you can simply disable it. You can also use it to find the offending company that leaked your email address.

Regarding passwords. I suggest a good password manager. Some offer darkweb monitoring. I'm not particularly interested in that, but you do you. Long random passwords for each site is really what you want. It'd be great to always assume your passwords are hashed and salted and those other words. Unfortunately that isnt the case.

Just my two cents. If you knew this, congratulations.

-rekcaHnaissuR

,sresu 0008 revo pmuD PI
resu yreve fo noitamrofni lanoitidda sah 4vpI tsriF

,llewsa liame dna drowssap senoyreve esaeler ll'I tsop siht seteled sotaredom/nimda yna fI
.keew txen srotaredom eht fo emos gnidrager noitamrofni lanosrep yrev sulP

.keew txen sliame edisgnola drowssap senoyreve esaeler ll'I 05 woleb detovnwod steg tsop siht fI

.keew txen stnuocca tla sih edisgnola drowssap snoraBnoV esaeler ll'I 001 evoba detovpu steg tsop siht fI

)tamrof nosj( pmuD PI
https://pastebin.com/asdfasdfasdf