Discovering You've Been Breached
Finding out your personal data has been exposed in a data breach can be unsettling. But acting quickly and methodically can significantly reduce the potential damage. Here's what to do.
Step 1: Don't Panic, But Act Quickly
Data breaches often involve millions of records, and attackers typically go after low-hanging fruit first. If you act quickly, you can secure your accounts before anyone attempts to use your exposed credentials.
Step 2: Change Compromised Passwords
Immediately change the password for the breached service. Then change the password on any other service where you used the same or similar password. This is the most critical step.
Step 3: Enable Two-Factor Authentication
Add two-factor authentication (2FA) to every account that supports it, starting with:
- Email accounts
- Banking and financial services
- Social media accounts
- Cloud storage services
Use an authenticator app rather than SMS-based 2FA when possible.
Step 4: Monitor Your Accounts
Watch for unusual activity on accounts that may have been compromised:
- Unfamiliar login notifications
- Password reset emails you didn't request
- Changes to account settings you didn't make
- Unfamiliar transactions on financial accounts
Step 5: Check for Broader Exposure
Use LeakedSource to check if your email appears in other breaches you may not know about. Many people are surprised to find they've been in multiple breaches.
Step 6: Consider a Password Manager
If you're not already using one, a password manager eliminates the temptation to reuse passwords and generates strong, unique passwords for every account.
Step 7: Set Up Ongoing Monitoring
Register for breach monitoring at LeakedSource to receive alerts if your email appears in future data breaches. Early notification gives you the best chance to act before any damage is done.
Step 8: Report Identity Theft
If you notice signs of identity theft (unfamiliar accounts, unexpected bills, credit score changes), report it to the relevant authorities in your country.