Even if a hacker has your "mail access" password, Two-Factor Authentication (like an app or hardware key) will stop them from getting into your account.
If your data is part of one of these 125k lists, you are at risk. Here is how to stay safe: Download 125k Combo Mail Access txt
A combo list is a text file containing thousands—sometimes millions—of username/email and password pairs. These are typically harvested from previous data breaches at major websites. Even if a hacker has your "mail access"
Possessing or distributing stolen credentials can lead to criminal charges under computer misuse laws. These are typically harvested from previous data breaches
Most public combo lists are "stale." The passwords have often been changed, or the accounts have already been flagged by security systems, making them useless for anything other than attracting the attention of law enforcement. How to Protect Your Own Email
Never reuse passwords. A manager allows you to have a unique, 20-character password for every site without needing to remember them all.