[prmoustache]

If the main concern was not identity theft, I would just say consider it as a blessing and forget about google.

What I would do now is concentrate on right now is buy a new comouter and phone, swap the sim card to it, shutdown all other connected devices, change my main password manager password, the login on each service / account I have in my password manager and change the password, email address and credit card number (get a new one from your bank asap). The point is that anyone who own my email account now cannot login to them or do some social engineering using recepts found in old emails. More often than not acccount recovery support ask you to verify your identity by asking you the last 2 to 4 numbers of your credit card numbers...very often the very same numbers that are left in clear text in receipt, you may still have some in your email history.

Once done, do an offline backups of your other computers and wipe them all as well and factory reset your original smartphone.

Start now and already call you boss to take a day off if needed it will probably take you more than a day if you have hundreds of accounts.

A best practice should be to unsubscribe to any automatic newsletter and delete all mail that relate to an account so that someone who compromise our accounts cannot figure out which service we consume based on our email history. This is better kept locally without staying on the email servers. Most people don't do that because they want their email archive accessible from any device out of conveniency.

[j4tech]

I reached out to financial institutions where I have an account. In addition to changing the email id, I am exploring all possible means to ensure that the id of the person requesting an outbound transaction for the account is doubly verified. Unfortunately, risk management office is closed over the weekend.

Other tips on backups and phone/pc resets noted.

[dadarecit]

dude what the fuck, literally lmao

[adingus]

Buying new hardware might be slightly over the top but it's essentially my experience with losing a Gmail account. The hijacker was extremely fast trying to get into my Amazon, PayPal, bank, credit card accounts and trying to steal my identity. The whole situation was awful.

I was stupid and used poor security which made it easier for this person (who was also probably using data from the Equifax leak for social engineering). But I wouldn't fault someone for erring on the side of paranoia.

[0des]

credential recovery and account takeover is trivial, most people have automated that process. once the lock is popped, all value can be extracted, verified, and pivoted in moments.

[dadarecit]

How do you pivot value xd fr nu-hn is too hilarious for my health