Credential stuffing has always been the most common type of attack, it's about to get worse but the correct way to protect yourself has not changed
1. Use 1Password (your passwords cannot be stolen from their servers)
2. Use a unique password for every login
That's it.