“People should remain vigilant” – over 2 million British accounts have already been leaked in 2025, despite a global downtick