Finding out your personal data was exposed can leave you looking at the screen for a moment. What do you do now? Don’t get scared. Don’t forget about it either. The first steps are important because stolen information can be used weeks or months after the original problem happened.
Start by Finding Out What Was Exposed
Read the message about the breach carefully. You want to find out what information was shared and when the problem happened. A leaked email address is a problem. Exposed financial details are a bigger problem.
Check the Details Before You React
• If your password was shared, change it away especially if you used that same password somewhere else. Using the password is how a small problem becomes a big problem.
• If your bank details were shared call the bank using the phone number or app and ask what they suggest.
• An email address that is shared might seem harmless at first. Expect more spam and messages that try to trick you later. Be careful about anything that suddenly feels important.
Secure Your Accounts
Start with the account that was affected by the breach. Make a password that you have never used before. Then check your important accounts because hackers often try the stolen passwords on other services.
Add Extra Security
Two-factor authentication is worth the extra time it takes to log in. Use an app that creates codes. Text messages are okay. I would rather use an app than a text message if both are available.
Also check if someone has already logged into the account. Look for devices or sessions that you don’t recognize and remove them. If an account suddenly asks you to click on a link to verify yourself stop.
Watch for Issues After the Breach
Look at your bank and credit card activity. If something seems wrong let the bank know soon as possible. For information about your identity check your credit report or any credit-monitoring service that is available where you live.
Don’t Let the Fix Become Another Problem
Here’s the thing. A breach can be the start of another scam. Someone might. Message you saying they can “fix” your account or get back stolen money. They will ask for a payment a password or a code.
If you need help reach out to the company using information you already trust. Keep the notice, about the breach. It might have details later especially if the company changes its advice.