The wake-up call wasn’t the money. It was a data breach notification from a service I didn’t even remember signing up for. Somewhere in 2019 I had apparently created an account with a photo-storage app, attached a card, and forgotten about it. Seven years later that company got breached, my email and password hash ended up in a dump, and I got the standard “we take your security seriously” email. That’s when it hit me: every subscription I’d forgotten about wasn’t just a small monthly charge. It was an account. With my card, my email, sometimes my address — sitting…