I am changing some today.
Unfortunately is is unclear which sites using those accounts are compromised (but I have my guesses based on which were and which were not).
ebay, facebook, et al should be required to make a public statement when their users’ data is compromised in a such a manner.
Same with the credit card companies and banks
I completely agree with that. Instead, they prefer to keep it quiet.