Hence why when you sign up for a massive service like Google, Yahoo, Bing, Facebook, etc. you should always use a garbage username and password that you don't use anywhere else. My banking and PayPal information is COMPLETELY different from my Google and Yahoo accounts, so if they stole the information in my Yahoo account, no big loss. The problem is, most people use the same darned password for EVERYTHING including their bank accounts, which makes it easy for crooks like this to make hundreds of millions or even BILLIONS of dollars by doing a hack like this.
Another thing that's important is that your RECOVERY email (the email you use if you "forget" your login details) for your bank and PayPal accounts should NOT be a Gmail, Yahoo, or other "free" email service. Otherwise if they get access to your email account, it's easier for them to claim they "lost" your bank account login details and have the bank send them a reset password link through your email.
All of my important stuff is routed through my @austinscomputers.com email addresses. The only thing I use a Gmail, Yahoo, etc. account for is when I sign up for whatever garbage to get a "free" something or other. It's not that @austinscomputers.com is unhackable. It's just that my email server isn't of much interest to hackers because it's not used by MILLIONS of people. Handing over your "real" information and "real" password to Google or Yahoo is just asking for trouble. If anything, sign up for a paid email service. It may cost money, but few people use it compared to all the freebies out there, which make it less attractive to hackers.
