Your Data Was Breached: What to Do Next

Data breaches are common, and you will probably receive a notification at some point. How quickly and calmly you respond makes a big difference.

Step 1: Confirm the notice is real

Criminals send fake breach alerts. Do not click links in the message. Go to the company's official site by typing the address yourself, or use its app.

Step 2: Find out what was exposed

Passwords, email addresses, phone numbers, payment cards or ID numbers each carry different risks. The notice should say, and you can also check a trusted breach-checking service.

Step 3: Change passwords

Change the password for the affected account, and anywhere else you used the same one. Use a password manager to create unique passwords, and turn on two-factor authentication.

Step 4: Protect your money

• If card numbers leaked, ask your bank to replace the card.
• Review statements for unfamiliar charges.
• Consider a fraud alert or credit freeze if government ID numbers were involved.

Step 5: Watch for phishing

Attackers use leaked details to write convincing messages. Be suspicious of unexpected emails and calls that mention accounts you hold.

Step 6: Keep records

Save the notice and note actions you took, in case you need to dispute fraud later.

Longer term

Use separate email addresses for important accounts, delete accounts you no longer use, and share only the data a service really needs.