What to Do When Your Data Is Breached

Step-by-step response plan when you learn your personal information was exposed in a data breach.

At a Glance

Don't panic, but act quickly

~15s

Data breaches are common — most major companies have been breached. The key is responding quickly. You usually learn about breaches through email notifications, news reports, or sites like haveibeenpwned.com.

Change affected passwords immediately

~15s

Change the password for the breached service first. Then change it anywhere you used the same password (this is why unique passwords matter). Use your password manager to generate new strong passwords.

Enable 2FA everywhere

~15s

Add two-factor authentication to all important accounts, especially email and banking. Even if a password is stolen, 2FA prevents unauthorized access.

Monitor your accounts

~15s

Check bank and credit card statements for unauthorized charges. Set up transaction alerts with your bank. Watch for unfamiliar accounts or charges in the weeks following a breach.

Consider a credit freeze

~15s

If Social Security numbers were exposed: freeze your credit at all three bureaus (Equifax, Experian, TransUnion). This prevents anyone from opening new accounts in your name. It's free to freeze and unfreeze.

Watch for phishing

~15s

After a breach, scammers send fake "security alert" emails pretending to be the breached company. Don't click links in these emails. Go directly to the company's website instead.

Long-term monitoring

~15s

Check haveibeenpwned.com periodically to see if your email appears in new breaches. Many breached companies offer free credit monitoring — sign up for it. Review your credit report annually at annualcreditreport.com.

You Did It!

You've finished reading: What to Do When Your Data Is Breached

How well did this guide stick with you?

Need more help? Book a TekSure tech

Rate this guide

How helpful was this guide?

data-breach

security

identity-theft

privacy

response