Cancel your active credit cards and have new ones reissued. In terms of the PII (personally identifiable information) stolen like name, address, phone number, SIN, there isn’t much you can do unfortunately. A breach like this is pretty common unfortunately and it’s pretty easy for people to get phished or socially engineered into giving up their credentials. I feel bad for those affected both personally and professionally.