It's not just about spam, it can be more sinister as well.
“In fact my result for my work email is I have been 'scraped' by an unknown source from LinkedIn, which is all readily available info, so changing my password won't really make a difference surely....”
The techie boring bit is they are actually keeping a record of your email and the hash of the encrypted password. Long story short, if you utilise the same combination on different sites, then you may be compromised. If your linked in email and password is the same one that you use to login to HMRC, Paypal or the bank, then change it now!
But even your linked in account could be at risk, social media is now widely used for identity fraud, plus your contacts can be scammed in your name etc etc. Private contacts details can then be targeted. (Cambridge Analytica?)
It's about accepting and mitigating risk versus being practical and realistic.
Your email and password are compromised along with 20 million other peoples, so one argument is that you would be very unlucky to be targeted personally. But these databases of addresses are being sold again and again and squirted into ever more sophisticated automated tools.
The official fix is to have a different email and password combination for every single website and application you visit. The most unpractical and useless advice known to man (or woman
).
There are various digital vaults touted by different providers for storing passwords, but at the very least, move to complex passwords with no meaningful words or dates. Even if it's the same password across a few site
Then utilise 2 factor authentication or any extra level of security on offer.
Until every PC, monitor smartphone and device has an eyeball scanner, we are stuck in this wild west of amateur and easily exploited security 