Suppose the password is leaked from where he got the email
On this point, I only benefited from the fact that my country does not support digital currencies, even if I go to the police who will not help me.
Thus, I found a way to evade responsibility
This is 101 Data Breach fyi.
Poloniex or Coinmana gets hacked. Some emails+passwords+some other info is then sold on darknet. Buyer gets the entire database and tries all entries on all similar websites, including other exchanges, wallets, emails, online banks, apps.
You can see how many times your email was leaked and even set alerts on new inputs here:
https://haveibeenpwned.com/ or here
https://monitor.firefox.com/Additionally you can use telegram bots and even see parts of your own password -> @mailsearchbot
You ever wonder why you and mixicali are alone in this thread? Because almost everyone else uses a strong password and doesn't reuse old passwords.
And just by using Google Signup you can eliminate this password altogether, because it uses a different security mechanism.