How-to
Protect Your Identity After a Data Breach: 7 Steps
Updated October 21, 2026 11 min read
Table of Contents
- Act Immediately: What to Do After a Data Breach
- Change Passwords After a Data Breach
- Credit Freeze After a Data Breach
- How to Protect Your Social Security Number After a Breach
- Monitor Your Accounts and Credit Reports
- Recognize and Avoid Scams After a Breach
- Report Identity Theft if It Occurs
- Frequently Asked Questions
Last Updated: October 4, 2026
Act Immediately: What to Do After a Data Breach
When you learn your personal information was exposed in a data breach, the steps you take immediately can significantly reduce your risk. Here's how to protect identity after breach by taking the right actions now.
Start by taking inventory of what was exposed, then secure your most sensitive accounts.
Assess the Exposed Information
Figure out exactly what was compromised by checking the breach notification email, letter, or company website.
Common types of exposed information include:
- Name and address
- Email address
- Phone number
The type of information exposed determines your next steps. Social Security numbers and credit card data pose higher risk than name and email alone.
Secure Your Accounts
Change the password on the breached account immediately, then move to your other accounts, especially financial ones.
Focus on these accounts first:
- Email accounts (these are gateways to all other accounts)
- Banking and financial accounts
- Social media accounts
If the breach included your password, assume it's compromised even if you've used it elsewhere. Change it everywhere.
Change Passwords After a Data Breach
Your passwords are your first line of defense. If a breach exposed your password, you need to change it right away.
Immediate Password Reset
Go directly to the company's website by typing the URL into your browser, don't click links in emails. Reset your password from account settings and verify the URL matches the official domain.
If you can't access the account, use "Forgot Password" and verify your identity via recovery email, phone number, security questions, or a code sent to your registered phone.
Prioritize Your Email Account
Your email is the master key to every other account. Change your email password immediately with a completely new password you've never used before.
After changing your email password, review your account security settings: update recovery email and phone numbers, check for suspicious forwarding rules, and sign out of unrecognized devices or locations.
Change Passwords on Critical Accounts
Once your email is secure, change passwords on your most important accounts in this order:
- Bank and financial accounts, These are the highest priority after email. Attackers with access to your bank account can transfer money or open fraudulent loans.
- Credit card accounts, Change passwords on each card's online portal, not just your bank's account.
- Brokerage or investment accounts, These often hold significant assets.
- Shopping accounts with saved payment methods, Amazon, eBay, and similar sites store your payment information.
- Social media accounts, Facebook, Instagram, LinkedIn, Twitter. These are often used for account recovery on other sites.
- Utility and telecom accounts, Phone, internet, and power companies. Attackers can use these to redirect services or gather personal information.
Start with critical accounts today and work through the rest over the next week to avoid forgetting new passwords.
Create Strong, Unique Passwords
Strong passwords are long and random, your best defense against unauthorized access.
A strong password should be:
- At least 16 characters long (longer is better)
- A mix of uppercase and lowercase letters
- Numbers and symbols
Avoid passwords with your name, birthdate, common words, sequential numbers, keyboard patterns, or previously breached passwords.
Use a password manager like Bitwarden, 1Password, LastPass, or Dashlane to generate and store complex passwords, you only need to remember one master password.
Enable Multi-Factor Authentication
Multi-factor authentication (MFA) adds a second security layer that prevents access even if your password is compromised.
Authenticator apps (Google Authenticator, Microsoft Authenticator, Authy) are most secure. Text message codes are less secure but better than nothing.
Enable MFA on every account that offers it. Prioritize financial accounts and email.
Credit Freeze After a Data Breach
A credit freeze is one of the most powerful tools to protect identity after breach and prevent new accounts opened in your name. It prevents someone from opening new accounts in your name.
Understanding Credit Freezes vs. Fraud Alerts
A credit freeze blocks access to your credit file, preventing new accounts. A fraud alert requires identity verification before new credit is approved and lasts one year.
Use a credit freeze if a breach exposed your Social Security number. Use a fraud alert if you're not ready for a full freeze.
| Protection Type | How It Works | How Long It Lasts | Best For |
|---|---|---|---|
| Credit Freeze | Blocks access to credit file | Until you lift it | High-risk breaches |
| Fraud Alert | Requires ID verification | 1 year (renewable) | Moderate risk |
How to Freeze Your Credit
Freeze your credit with all three major credit bureaus. You need to contact each one separately. The process is free.
Equifax:
- Online: www.equifax.com/personal/credit-report-services
- Phone: 1-800-349-9960
- Mail: Equifax Security Freeze, P.O. Box 105788, Atlanta, GA 30348
Experian:
- Online: www.experian.com/freeze
- Phone: 1-888-397-3742
- Mail: Experian Security Freeze, P.O. Box 9554, Allen, TX 75013
TransUnion:
- Online: www.transunion.com/credit-freeze
- Phone: 1-888-909-8872
- Mail: TransUnion Security Freeze, P.O. Box 2000, Chester, PA 19022
Each bureau will give you a PIN or password. Write it down and store it safely. You'll need this PIN to unfreeze your credit later.
How to Protect Your Social Security Number After a Breach
If a breach exposed your Social Security number, you need extra protection.
First, request a copy of your Social Security statement from the Social Security Administration. Visit the Social Security Administration's official website to request your statement online.
Second, monitor your credit reports closely. Check for accounts you didn't open. Review all inquiries.
Third, consider placing a fraud alert with the credit bureaus.
Finally, be cautious about sharing your Social Security number. Only provide it when absolutely necessary.
Monitor Your Accounts and Credit Reports
After you've taken immediate action, ongoing monitoring is crucial. Criminals may wait weeks or months before using stolen information.
Check Your Credit Reports
You're entitled to a free credit report from each bureau once per year.
Get your free reports at AnnualCreditReport.com, the official source for free credit reports. This is the only authorized site for free reports.
Look for unrecognized accounts, unfamiliar inquiries, incorrect information, and negative items that aren't yours. Dispute errors in writing; the bureau has 30 days to investigate.
Set Up Account Alerts
Set up free account alerts for large purchases, online purchases, new accounts, address changes, password changes, and transfers. Choose notification method (email, text, or phone) in your account settings.
Additionally, consider a credit monitoring service. These services track your credit file for changes. Some are free, others charge a fee.
Recognize and Avoid Scams After a Breach
Criminals know a breach happened. They'll use that information to target victims with scams and phishing attempts that are far more convincing than generic spam because they reference real details from the breach.
How Attackers Use Breach Data in Scams
Attackers use exposed information to impersonate legitimate companies and create urgency around the breach.
Common tactics include:
- Impersonating the breached company, "We've detected suspicious activity on your [Company Name] account. Click here to verify your identity." They use real details from the breach to sound authentic.
- Impersonating credit bureaus or monitoring services, "We've placed a fraud alert on your account. Confirm your Social Security number to proceed." They exploit your fear about the breach.
- Fake breach notification services, "We're helping victims of the [Company Name] breach. Sign up for free credit monitoring." They charge fees for free services or steal additional information.
Verify Communications Safely
The safest way to verify whether a message is legitimate is to contact the company directly using a phone number or website you find yourself, not one provided in the suspicious message.
For messages about a specific company:
- Do not click any links in the email or text message.
- Go to the company's official website by typing the URL directly into your browser.
- Look for a "Contact Us" or "Security" page.
- Call the phone number listed on the official website.
- Tell them you received a message and ask if it's legitimate. Provide the sender's email address or phone number from the suspicious message.
- If the company confirms the message is fake, report it to the Federal Trade Commission at reportidentitytheft.ftc.gov.
For messages about credit bureaus or fraud alerts:
Contact the credit bureaus directly:
- Equifax: 1-800-349-9960 or www.equifax.com
- Experian: 1-888-397-3742 or www.experian.com
- TransUnion: 1-888-909-8872 or www.transunion.com
Ask them directly if they've placed a fraud alert on your account or if the message is legitimate.
For messages about identity theft or recovery services:
Contact the Federal Trade Commission's identity theft reporting tool at reportidentitytheft.ftc.gov. This is the official government resource. Legitimate recovery services will never contact you unsolicited.
Red Flags in Suspicious Messages
Phishing emails and texts often contain telltale signs:
Red flags include: generic greetings ("Dear Customer"), urgent language ("Act now"), requests for passwords or Social Security numbers, suspicious sender addresses, mismatched links, spelling errors, and unexpected attachments.
Unsolicited Offers and Recovery Scams
Be skeptical of unsolicited offers for credit monitoring or recovery services. Red flags include pressure to act immediately, requests for upfront payment, guarantees of complete removal, and requests for your Social Security number. Research any service on Trustpilot or the Better Business Bureau before signing up.
Report Identity Theft if It Occurs
Despite your efforts, identity theft can still happen.
First, contact the company where the fraud occurred.
Third, file a police report. Get a copy of the report number.
Fourth, contact the credit bureaus. Tell them about the fraud.
Fifth, monitor your credit reports and accounts closely for the next year.
By taking immediate action, changing passwords, freezing credit, and monitoring accounts, you can significantly reduce your risk after a breach. At Cybersweep, we help reduce your exposure by requesting removal of your personal information from data brokers and online sources.
Frequently Asked Questions
What should I do first if I find out I was in a data breach?
Start by confirming the breach is real, check the company's official website or contact them directly. Then assess what information was exposed. If passwords were compromised, change them immediately on that account and any others using the same password. If financial or identity information was exposed, place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion) and consider a credit freeze. Monitor your accounts closely for suspicious activity over the coming weeks and months.
How do I protect my Social Security number after a data breach?
If your Social Security number was exposed, a credit freeze is your strongest defense. This prevents criminals from opening new accounts in your name. You can also place a fraud alert, which alerts creditors to verify your identity before extending credit. Monitor your credit reports regularly for accounts you don't recognize. Be cautious about sharing your Social Security number with anyone unless absolutely necessary, and never respond to unsolicited requests for it via email or phone.
Should I freeze my credit or place a fraud alert after a breach?
Both serve different purposes. A fraud alert notifies creditors to verify your identity before opening new accounts, it's free and lasts one year. A credit freeze blocks access to your credit file entirely, preventing new accounts from being opened in your name, it's also free and more restrictive. If your Social Security number, financial information, or identity details were exposed, a credit freeze offers stronger protection. You can place a fraud alert immediately while deciding whether to freeze your credit.
How long should I monitor my accounts and credit after a breach?
Monitor actively for at least 12 months after a breach, especially if sensitive information like your Social Security number was exposed. Check your credit reports regularly, you're entitled to one free report per year from each of the three major bureaus at annualcreditreport.com. Review bank and credit card statements weekly for unauthorized transactions. Set up account alerts with your financial institutions to flag suspicious activity. After a year, continue monitoring periodically, as some criminals may hold onto information and use it later.