Help! My iphone has had a data breach what do I do?

[SpringIsHereAgainYay]

When I was using my iphone out on the 4G/5G network I had a web page come up saying it was not secure and others could see and potentially alter what activity I was doing. That prompted me to set up basic McAfee protection on my phone. There is a function to see if you have had any data breaches on your email and it showed I had 4 on one email address and one on another and it said:
'The following might be exposed Passwords, Bank accounts, Credit cards, phone numbers'.

I have removed my internet banking apps and changed my passwords using my laptop on everything I can think of.

How do I go about getting my phone secure again? Do I have to pay the extortionate price for more protection on my phone? McAfee says it can remove my info from sites selling it and browse securely with VPN. Will it ever be safe to use my phone again if I dont go for this?

I'm so upset by this and i'm stumped as to what to do next.

I think Mcaffey is a giant scam personally. Go on to the passwords app for iPhone and see if apple have said you also have had a password leak. Then download some cheap ad blockers like Adblockpro AdGuard, BlockBear tc and if you want you can upgrade their things to premium but I really wouldn’t worry. It’s not like a computer where you can be hacked and iPhones are generally not hackable by websites anyway. Mcaffee is such a scam all it does is make up things that had ‘hacked you’ also some websites do have spam like that but usually it’s so you download their shitty apps to ‘protect your phone’ I can guarantee online banking apps on your phone cannot be seen by hackers if they’re password protected or have Face ID on them

The web page was a scam oh my god. That was the method to hack you in the first instance!

I got 1 of those messages recently, assumed it was a scam so just ignored it

No, the warning just means that your email (not necessarily your password) has been found on a bulk file relating to undisclosed data. This usually means that your email address was being stored (but not necessarily used) by whatever account was hacked.

My Fitness Pal is the most common one, it's used as a fitness tracker on alot of mobile phones. They were hacked a few years ago. It could just be that a phone you had at the time had a fitness tracker, steps counter, and you used it.

Stop panicking.

It's good practice to change passwords regularly anyway.