If your password winds up in a mega-breach such as the ones at Yahoo, Dropbox or Tumblr, it can be easy for a hacker to take over your account - especially if you reuse the same password across multiple services. But it isn't always easy to tell if your password has been stolen, and companies can sometimes take years to notify users of a breach.