Breached wallets should ‘move funds immediately’