Treat the exposed link as compromised if it contains usable access credentials. Remove the public copy, contact the provider about replacement or revocation, and review other places where the same link was stored. Deletion alone cannot retrieve copies already made.
Preserve the incident details
Record where and when the link appeared without reposting it. That helps the provider understand the exposure. A support report can describe the affected account privately rather than embedding the full URL in another public conversation.
Use the supported account process
Some services issue fixed credentials that only support can replace. Do not guess password-change endpoints or buy an unnecessary new plan as a substitute for asking. Follow the provider's established verification process.
Prevent a repeat
Redact future screenshots and avoid public playlist-testing sites. If the password was reused on accounts you control, change those through their own official settings. Keep the response focused on the actual exposed credential rather than changing unrelated router options.
