Admin email found in a data breach

What it is

The email address tied to the WordPress admin account appears in known public data breaches. This does NOT mean the site itself has been hacked — it means that email/password combination is exposed elsewhere and could be reused against it.

How to fix it

Change the password anywhere it was reused, use a unique password for WordPress, and turn on two-factor authentication. Nothing on the site itself needs to change.