That letter saying your information was exposed in a data breach is stressful — but it is also a head start. Use this checklist to turn the warning into protection before anyone misuses your data.
Step 1: Read the notice carefully. Identify exactly what was exposed — names and emails are one thing; Social Security numbers, account numbers, or passwords are far more serious. The notice should also state what the company is offering, such as free monitoring.
Step 2: Place a fraud alert or freeze. If SSNs were exposed, do not wait for trouble. Place fraud alerts on your credit files, or go further with full security freezes at all three bureaus. Freezes are free and block new-account fraud cold.
Step 3: Change exposed passwords. If login credentials were involved, change those passwords immediately — and anywhere else you reused them. Turn on two-factor authentication on important accounts.
Step 4: Enroll in the offered monitoring — but read the terms. Breach-provided monitoring is usually free for a year or two. Take it, but note when it expires and what data it actually watches.
Step 5: Watch your statements and reports. Review bank and card statements monthly and pull your free credit reports to look for unfamiliar accounts or inquiries. Early detection keeps small problems small.
Step 6: Beware follow-up scams. Breach news triggers phishing waves. The breached company will not call asking for your SSN or password to ‘verify’ you — treat such calls as scams and hang up.
Step 7: File taxes early if SSNs were exposed. An early filing beats a thief to your refund. If you are a confirmed victim of tax identity theft, the IRS offers an Identity Protection PIN for extra security.
Step 8: File an FTC report if misuse appears. If you spot actual fraud, go to IdentityTheft.gov for your recovery plan and official report — the same foundation used for any identity theft case.
Join the conversation
Load Facebook comments to read and reply using your Facebook account.