Step 1 — Stop the bleeding
Freeze affected cards via your banking app, log out of impacted accounts on all devices, change passwords starting with your email account (because email is the recovery channel for everything else), and revoke any active sessions or third-party app connections.