Confirm what the alert says
Look for the source, observation date and fields involved. Check whether the result is a confirmed match or an inference. Avoid entering passwords into an unfamiliar page to “verify” an alert.
Use the affected service’s recovery tools
If an account may be compromised, open the provider directly and follow its security guidance. Review its available sign-in and recovery information. Do not rely on a message sender’s instructions to regain access.
Be realistic about deletion
A request to one operator cannot establish that every copy has disappeared. Keep the evidence you need, limit further exposure and record the specific outcomes you can verify.