"Data breaches provide a distribution hub for malware for years to come."
Quick, at least partial solution to that: change email address. It then requires another leak somewhere to get the new one. And far easier if the original was bupa@mydomain - just change it to oops@mydomain.