This evening I've been going through ALL of my internet accounts changing their passwords.
It takes quite a while as it turns out some systems really do not like you doing such a simple thing!
Every account now has a different fully random n-character code. This should mean that everyone who had my hashed data from a leak has now got something quite useless.