What's the best practice for web accounts that have been breached but I don't use anymore?

Hi liz_wagner. Although you no longer use those old accounts, they may still contain some of your personal data, which is what you'd have to worry about. Therefore, I do recommend signing into those accounts and deleting them so that no one else can access them. If it's not possible to delete those accounts, then the next best thing is to change the password to those accounts and turn on 2FA.

There are all types of businesses and their security protocols can vary. However, businesses with good security practices do delete accounts, such as when someone in their company leaves.

I hope this helps. Let us know if you have any other questions!