[NO] Was scammed months ago, anything I can do now?

A user was scammed months ago (up to a year and a half) by purchasing an item online that never arrived. They now express concern about their bank information and password security, as they reused the same password across multiple accounts.