Thinking maybe "password breach reported by some third party" is a good indicator that it's fearmongering and not actually worth taking any action or personally worrying about.