Yeah, I figure you've got a good month before they do something with the collected accounts, or more depending on who they sold it to.

At the very least, never save a password to a critical account, such as a financial account or a root/administrator password. I could care less if someone takes over my Twitter and Facebook (if I had them) but am highly paranoid about accounts which will actually affect my life.