Data breaches can strike at any time, affecting customers of companies both large and small. When your private information falls into the wrong hands, the most important question becomes: how should you respond to a data breach?

It depends on the type of data compromised and what steps you take immediately afterward.

Respond to a Data Breach by Watching for Phishing Scams

If your email address is included in the compromised data, be extra cautious. Fraudsters often send phishing emails after a major breach, asking you to click links or share personal details.

For example, following the Target data breach in 2013, scammers sent fake emails pretending to help consumers request a security freeze – when in reality, they were stealing even more information.

Tip: Don’t click suspicious links. Instead, visit the breached company’s official website directly and follow their posted instructions.

Learn more about staying safe in our article: Avoid Password Storage Pitfalls.

Change Compromised Passwords Immediately

If your password is leaked in a breach, change it on the affected account right away. If you’ve reused that same password elsewhere, update those accounts too.

Not sure whether you were caught up in a breach? Check your email address at Have I Been Pwned, which indexes billions of exposed credentials and will tell you which breaches included you.

This is where a password manager like mSecure can help. You can securely store unique logins for all your accounts and avoid the dangers of password reuse. (We also recommend reading our guide on the Benefits of Using a Password Manager.)

Request New Credit or Debit Cards After a Data Breach

One of the best ways to respond to a data breach involving financial data is by monitoring your credit card and bank accounts daily. Watch for fraudulent charges and report anything suspicious immediately.

• Credit cards: Many issuers will reissue your card automatically after a breach, but if not, contact them and request a new number.
• Debit cards: Cancel the compromised card and request a replacement with a new PIN.
• Bank account numbers: If stolen, close the account and open a new one.

Remember: You are not liable for fraudulent transactions made with a compromised card number.

Protect Your Social Security Number After a Breach

If your Social Security number was exposed, you’ll need to act quickly. Contact one of the three major credit reporting agencies ( Experian, TransUnion, or Equifax) to place a fraud alert on your credit file. This will require lenders to verify your identity more carefully before approving credit in your name.

Stronger still is a credit freeze. A freeze blocks new credit from being opened in your name at all, and since 2018 it’s free by law at each of the three bureaus. You’ll need to place it with all three, and you can lift it temporarily whenever you’re applying for something yourself.

Many companies affected by large breaches also offer free credit monitoring services. Use them to track unusual activity tied to your SSN.

Final Thoughts: Stay Vigilant and Practice good Digital Hygiene

No matter what type of data is compromised, practicing good digital hygiene can reduce your risks. That includes:

• Using strong, unique passwords for every account
• Monitoring your bank and credit reports regularly
• Storing private information securely (see our post on avoiding storage pitfalls)

For additional protections, you can also review the Federal Trace Commission’s guidance on responding to a data breach. 

By knowing how to respond to a data breach and acting quickly, you can minimize damage and protect your identity.