If you submit some personal bank account passwords and other information on their website and it is stolen, you generally don't need to redo the system.
If you didn't do anything, it's because you clicked on that website casually, and your account was stolen, which may have been implanted in Trojan horse. But this is rarely done, because the success rate is not as high as the above, and the technical means needed are more troublesome. . So if it is the above two points, Trojan eavesdropping can be basically ruled out.