My data was leaked - what do I need to do now?
You must temporarily freeze your credit cards and wallets and migrate your compromised logins to use two-factor authentication and a secure, encrypted password manager, to stop cybercriminals from using your leaked data to drain your accounts or launch AI-powered phishing attacks.
Use data removal services to regularly delete any further leaked data from data broker websites.
The post-breach emergency checklist: 2 immediate steps if your data is leaked
The first time I found out that my own data had been leaked, I was terrified - I did not know what it could be used for or when. Fortunately, besides all the fear-mongering you can find out there, there are two steps you can follow right away:
- Change and secure your passwords. Hackers use AI to test your leaked password across thousands of other websites, including your bank and email provider.
If you have ever reused the leaked password, you must change it immediately on your critical accounts. Read our guide on how to stop relying on your memory and generate unbreakable, unique passwords for every site. - Enable two-factor authentication (2FA). 2FA is an additional layer of security for your accounts: If you log in from a device for the first time, you need to prove that it is really you with an additional "second factor" - usually through an authenticator app.
Even if you do not want to use a password manager right now, at least enable two-factor authentication for your important accounts, like email and banking.
Depending on where you live, when data like your Social Security Number or address leaks, the immediate danger is that criminals open credit cards in your name:
In the US, you must visit the websites of the three major bureaus - Experian, Equifax, and TransUnion - and activate a free "security freeze." This imposes a total lockdown on your file, meaning no one can open a new financial account in your name, even if they have all your leaked data.
Specific action based on the type of leaked data
- What to do if I find my password has been leaked?
- What to do if my Credit Card was cloned?
- What to do if I find my phone number online?
Ideally, you would not need to take care of removing such data yourself again and again - and you don't need to. Read our guide to let professional companies take care of keeping your data removed from data brokers:
BOP Authors