Pfishing on iPhone 16 Pro

I received an email on my iPhone that asked if I would take a survey for a Health Care Organization that I do business with. It said that for my trouble, they would send me a free electric toothbrush. Like an idiot, I clicked on the link and took a very realistic survey on their service. It asked me for my phone number, email and my birthdate. I figured that they already had my email (but know they know it is a real email), I used an old landline phone number for the phone number and for the first time ever I dialed in my actual birthdate. What was I thinking?

Then it asked for my address and a credit card so that they could charge shipping for the toothbrush. It suddenly occurred to me that I had not checked the address from which the email had been sent. When I did, I realized that it was not legitimate.

I ordinarily do NOT succumb to pfishing attempts like this! I am the one cautioning others not to click and give information. It was SO easy to slip into thinking this was legit. I share this as a warning to others! But also, I am more than a little freaked out about my exposure here. Please! Would someone with a more objective perspective tell me how to protect myself.

I am thinking that it might be a good idea to change ALL of my passwords for the new year, anyway. My credit is on hold at the credit bureaus already. What else do I need to do?

thank you!

Marsue