I didn't worry about this at first because I have changed MS emails and PayPal accounts since I last used ISS. I only use the email that is on my ISS accounts for legacy accounts, nothing with current info, etc.
Today an old Walmart account and a Postmates account (both with the old email and a shared password) were compromised. Again, no current info/cards/PayPal on these, but I wanted to let others know in case these attacks are related.