haveibeenpwned, found several records

Back in 2013, I got hacked on multiple services and I had no idea how, I wasn't 100% cautious with privacy but I knew the implications and never shared anything with anyone. I've changed the specific username/pw that was corrupted back then and nothing ever happened then. I was always curious though on how I got hacked.

Well I guess I know now 7 years later, thanks to haveibeenpwned. They found like 6 records with my old email I used to use. Exactly in 2013, both 000webhost and Badoo had data breaches, and I had an account on both service with the exact same username/pw combo.

I already reacted accordingly I guess back then by changing my passwords, I know it's quite late at this point but... Is there anything else I should be doing aswell to protect myself from these breaches?