@haveibeenpwned

Even if you change yout password, assuming you can with the DDoS, you will have to change it again.

Until the breach is fully hunted down, the exfil could occur again.