Also change username if you happen to have remote access enabled. Your IP would be logged here. Potentially one solid password brute force attack away from gaining access to your PC.