Here's my layman's summary:  Change your password.  Don't use the same password anywhere.  If you're too dumb to remember the million different passwords for every damn website (like I am) get a password manager such as Lastpass.  If you want super-strong passwords use Lastpass to generate random, lengthy ones for you.  Here is an example of one of the random passwords that it generates:

3BVFeiTUp9VniaFqsvEhT*RoQQ5wz$e8PR%Nb!pMHXnY2yM*Sf@HXS2V&95nF0N3*HYwFHcNzyBO4iN#Y8TMGYW36a%UqEaCcBt#

Impossible for a human to memorize or guess, as impossible as is possible for a computer to guess.  Imagine having a unique password like that for every site you visit.  You would be more secure than the CIA, literally.  And if somehow one site did get hacked and they did guess your password, it would only affect that single site since you have a different, unique password for all the others.

As it stands now, if you used your Pirate pw for any other sites, those sites are now also at high risk of being breached.  Any site that shares your Pirate pw also needs to be changed, even if it's not a VS site.  That is because hackers will now research your life and test your pirate password on any site they think you could have ever joined.  They'll test it at puffinkush.com, your bank, the SS administration, the IRS, every credit card website, everywhere.  If they get lucky and get into one, your're ****ed.  Next thing you know there's a Mexican with your SS number signing up for 30 credit cards in your name.