What to Do When You Get a Data Breach Notification

Step-by-step actions to protect yourself after a company tells you your data was exposed.

At a Glance

What is a data breach?

~20s

A data breach happens when hackers break into a company's systems and steal customer information — things like your email, password, name, Social Security number, or credit card number. If a company you have an account with gets breached, they are required by law to notify you. Data breaches are common — the important thing is how you respond.

Verify the notification is real

~31s

First, make sure the breach notification is legitimate and not a scam. 1. **Do NOT click links in the email** — Scammers send fake breach notifications 2. **Go directly to the company's website** and look for a breach announcement 3. **Check the news** — Search for the company name plus "data breach" 4. **Check HaveIBeenPwned.com** — Enter your email to see if it appeared in known breaches If the breach is real, take the following steps right away.

Quick Tip

Bookmark HaveIBeenPwned.com and check it periodically. It is a free, trustworthy service that tracks known data breaches.

Change your passwords immediately

~26s

This is the most important step. 1. **Change the password for the breached account** 2. **Change passwords anywhere you used the same password** 3. **Create unique passwords for each account** going forward 4. **Use a password manager** — Apple Passwords, Google Password Manager, or 1Password can create and remember strong unique passwords 5. **Turn on two-factor authentication** wherever available A strong password is at least 12 characters with letters, numbers, and symbols. Or use a passphrase like "correct horse battery staple."

Protect your financial information

~49s

If the breach included financial data or your Social Security number: 1. **Check your bank and credit card statements** for unrecognized charges 2. **If your credit card was exposed** — Call your bank for a new card number 3. **If your Social Security number was exposed:** - Place a credit freeze at all three credit bureaus (Equifax, Experian, TransUnion) — this is free - Set up free credit monitoring with Credit Karma or your bank - Consider an IRS Identity Protection PIN at irs.gov 4. **Accept free monitoring** — Many breached companies offer 1-2 years of free credit monitoring 5. **File your taxes early** — If your SSN was exposed, file early to prevent fake returns Act quickly — the first 48 hours after a breach notification are the most critical.

Warning

If the breach included your Social Security number, place a credit freeze right away. It is free and prevents anyone from opening new accounts in your name.

You Did It!

You've finished reading: What to Do When You Get a Data Breach Notification

How well did this guide stick with you?

Need more help? Book a TekSure tech

Rate this guide

How helpful was this guide?

data breach

security

password

identity theft

notification