The ones that you know were pwned.
In theory you should change all passwords all the time, but this is a practical middle-ground between that and "never".
Breaches like this one give no indication of which password is exposed, if any.
AFAIK, there is nothing actionable.
