What to Do in the First 24 Hours After a Data Breach Notice
A practical triage order for the day you learn your information may have been exposed.
8–12 min readRead guide →
Action library
All response guides
One situation per guide. No product reviews, no generic cybersecurity filler, and no legal-outcome promises.
AllFirst 24 hoursData type responseCredit freezeAccount securityCredit monitoringReportingChildren & dependentsState notices
How to Read a Data Breach Letter Without Missing the Important Part
Use the notice as an evidence document: identify scope, dates, affected data, offered services, and the response steps that actually match your risk.
8–12 min readRead guide →
Is the Data Breach Notice Real or a Phishing Scam?
Verify a breach notice without handing more personal information to someone who may be impersonating the breached company.
8–12 min readRead guide →
Social Security Number Exposed in a Data Breach: What to Do Next
A durable identifier calls for a longer response than replacing a payment card. Focus on new-account fraud, tax misuse, and records that may surface later.
8–12 min readRead guide →
How to Freeze Your Credit at All Three Bureaus
A three-part checklist for placing, confirming, and safely storing a credit freeze with Equifax, Experian, and TransUnion.
8–12 min readRead guide →
Credit Freeze vs. Fraud Alert After a Breach
Both are free, but they work differently. Choose based on whether you want to restrict new-credit access or add identity checks while keeping the file available.
8–12 min readRead guide →
How to Temporarily Lift a Credit Freeze for a Loan or Application
Unfreeze only the credit file and time window you need, then verify that protection is back in place.
8–12 min readRead guide →
Which Passwords Should You Change First After a Data Breach?
Use dependency order: secure the accounts that reset other accounts before working through lower-impact logins.
8–12 min readRead guide →
How to Secure Your Primary Email After a Breach
Email is often the recovery channel for everything else. Lock it down before an attacker can use it to reset other accounts.
8–12 min readRead guide →
How to Check Your Credit Reports After a Data Breach
Use all three reports as a baseline, then look for accounts, inquiries, addresses, and debts that do not fit your history.
8–12 min readRead guide →
Unknown Account on Your Credit Report After a Breach: What to Do
Investigate first, then move quickly if the account truly is not yours.
8–12 min readRead guide →
How to Report Identity Theft to the FTC at IdentityTheft.gov
What the federal reporting process does, what to gather before you start, and how the resulting report fits into recovery.
8–12 min readRead guide →
When Do You Need a Police Report for Identity Theft?
A local police report can be useful or required in some recovery situations, but it is not the same document as an FTC Identity Theft Report.
8–12 min readRead guide →
Tax Return Rejected Because Your SSN Was Already Used: What to Do
Treat a duplicate filing as tax identity theft, follow the IRS notice or rejection path, and protect future returns with an IP PIN.
8–12 min readRead guide →
Medical Identity Theft After a Health Data Breach: What to Check
Medical identity theft can mix another person’s care or claims with your records. Review clinical records, insurance statements, and credit information separately.
8–12 min readRead guide →
Child Identity Theft After a Data Breach: How to Check and Respond
A child may have no normal reason to possess a credit file, which makes an unexpected file or account especially important to investigate.
8–12 min readRead guide →
Bank Account or Routing Number Exposed in a Breach: What to Do
Credit freezes do not secure an existing bank account. Contact the bank directly and focus on transaction controls, login security, and account-number replacement when appropriate.
8–12 min readRead guide →
Credit or Debit Card Exposed in a Data Breach: What to Do
Card-number exposure is usually handled at the issuer level: replace credentials, review transactions, and secure the account that controls the card.
8–12 min readRead guide →
Should You Use the Free Credit Monitoring Offered After a Breach?
Free monitoring can be useful for alerts, but read the enrollment terms and understand what it cannot prevent.
8–12 min readRead guide →
California Data Breach Notices: What a Resident Should Check
A consumer-focused reading guide to California’s official breach-notice system and public notice database.
8–12 min readRead guide →
Texas Data Breach Notices: What Consumers Should Know
Use the Texas Attorney General’s official breach resources to understand notice timing, public reports, and the consumer complaint route.
8–12 min readRead guide →
New York SHIELD Act Breach Notices: A Consumer Reading Guide
Understand how New York defines covered breaches, where consumers can complain, and how to use the state’s official guidance without turning it into legal advice.
8–12 min readRead guide →
How to Block Identity-Theft Information From Your Credit Report
Identity-theft blocking is different from a normal accuracy dispute and requires specific documentation.
8–12 min readRead guide →
How to Check Your Social Security Earnings Record After an SSN Breach
Credit reports do not show every misuse of a Social Security number. Review the SSA earnings record for wages that are not yours.
8–12 min readRead guide →
How to Place a 7-Year Extended Fraud Alert After Identity Theft
Use an extended fraud alert after confirmed identity theft when you want lenders to take extra steps to verify new-credit applications in your name.
9–12 min readRead guide →
Hard Inquiry You Don’t Recognize After a Data Breach: What to Do
An unfamiliar hard inquiry can signal a credit application in your name. Verify the source, document it, and use the identity-theft dispute path if unauthorized.
9–12 min readRead guide →
Debt Collector Contacting You About Identity-Theft Debt: What to Do
If a collector contacts you about identity-theft debt, verify the collector, preserve the validation notice, dispute in writing, and document the theft.
10–13 min readRead guide →
Fraudulent USPS Change of Address After Identity Theft: What to Do
If USPS confirms a change of address you never requested, report the fraud, restore mail control, and secure accounts that rely on postal delivery.
9–12 min readRead guide →
Unemployment Benefits Filed in Your Name: How to Report Identity Fraud
An unexpected unemployment claim, debit card, or 1099-G can mean your identity was used for benefits fraud. Report it to the issuing state and preserve the tax record.
10–13 min readRead guide →
SIM Swap or Port-Out Fraud After a Data Breach: What to Do
If your phone loses service or your number moves without permission, contact the carrier, recover the number, and secure accounts that use SMS verification.
9–12 min readRead guide →
Driver’s License or State ID Number Exposed in a Data Breach: What to Do
A response plan for an exposed license or state ID number without assuming the physical card must be replaced.
9–12 min readRead guide →
Passport Number Exposed in a Data Breach: What to Do Next
What a leaked U.S. passport number means, when not to cancel a valid passport, and what to monitor after the breach.
9–12 min readRead guide →
Date of Birth and Home Address Exposed in a Breach: What to Do
How to respond when a breach exposes identity details that cannot simply be changed, without treating them like passwords.
8–11 min readRead guide →
Health Insurance Member ID Exposed in a Breach: What to Check
A practical response for a leaked health-plan member or subscriber ID, with emphasis on claims, benefits, and medical records.
9–12 min readRead guide →
Email Address and Phone Number Exposed in a Data Breach: What to Do
How to handle a breach that exposes your main contact channels and makes phishing, password resets, and impersonation more convincing.
8–11 min readRead guide →
Bank Login Credentials Exposed in a Data Breach: What to Do First
A bank-account takeover response that prioritizes access control, transaction review, and verified contact with the financial institution.
9–12 min readRead guide →
Password Reset Emails After a Data Breach: How to Tell What Is Legitimate
A verification-first workflow for unexpected password-reset messages that arrive after a real company breach.
8–11 min readRead guide →
New Mobile Phone Account Opened in Your Name: What to Do
How to respond when identity thieves use your information to open a cellular account or device line you did not authorize.
9–12 min readRead guide →
Recovery Email or Phone Number Changed Without Permission: What to Do
A takeover-focused response for unauthorized changes to account recovery settings after a breach.
8–11 min readRead guide →
Unauthorized ACH Debit After a Data Breach: What to Do
A bank-first response for electronic debits you did not authorize after account or routing information was exposed.
9–12 min readRead guide →
Utility Account Opened in Your Name: How to Respond to Identity Theft
Steps for a fraudulent electric, water, cable, or similar service account that appears after your identity information is stolen.
9–12 min readRead guide →
Unknown Address on Your Credit Report After a Breach: What to Do
How to investigate an unfamiliar address, distinguish a harmless reporting artifact from identity theft, and correct inaccurate credit-file data.
8–11 min readRead guide →
Identity-Theft Account Sent to Collections: How to Dispute It
A documentation-first approach when a debt collector contacts you about an account created through identity theft.
10–13 min readRead guide →
A Lender Says You Opened an Account You Never Applied For: What to Do
A step-by-step response when a bank, lender, or creditor confirms a new account that you did not authorize.
9–12 min readRead guide →
How to Request Transaction or Application Records After Identity Theft
How identity-theft victims can ask a business for documents tied to fraudulent accounts or transactions and keep the request organized.
9–12 min readRead guide →
What Records to Keep During Identity Theft Recovery
A practical incident-file system for breach notices, calls, disputes, confirmations, and evidence without turning recovery into a pile of screenshots.
8–11 min readRead guide →
Social Security Earnings Record Is Wrong After Identity Theft: What to Do
How to review an SSA earnings history, distinguish ordinary reporting delays from misuse, and request a correction when wages are wrong.
9–12 min readRead guide →
How to Freeze a Child’s Credit After a Data Breach
What parents and guardians should know about creating or freezing a minor’s credit file when identity data may have been exposed.
10–13 min readRead guide →
Unexpected IRS Notice About a Child or Dependent: Identity-Theft Steps
How to respond when a dependent’s SSN appears on another tax return or an IRS notice suggests employment or filing misuse.
10–13 min readRead guide →
Fraudulent Auto Loan or Lease in Your Name: What to Do
How to respond when a vehicle loan or lease appears after identity theft, including lender records, credit reports, and downstream collection risks.
10–13 min readRead guide →
Florida Data Breach Notices: What Residents Should Check
A consumer reading guide to Florida’s breach-notification rule, the 30-day timing language, and the data details that drive your response.
9–12 min readRead guide →
Illinois Data Breach Notices: What Residents Should Look For
How to read an Illinois Personal Information Protection Act notice and connect its required consumer information to practical recovery steps.
9–12 min readRead guide →
Massachusetts Data Breach Notices: A Consumer Reading Guide
What Massachusetts residents should know about breach letters, security-freeze information, police-report language, and SSN-related monitoring.
9–12 min readRead guide →
Washington Data Breach Notices: What Consumers Should Check
A plain-language guide to Washington’s 30-day breach-notification framework and the specific details a resident notice should contain.
9–12 min readRead guide →
Colorado Data Breach Notices: What Residents Should Check
How Colorado’s 30-day notification rule, consumer notice content, and 500-resident Attorney General threshold affect the letter you receive.
9–12 min readRead guide →
Virginia Data Breach Notices: What Residents Should Know
A reading guide to Virginia’s harm-based notification rule, required notice content, and the identity data covered by the statute.
9–12 min readRead guide →
Georgia Data Breach Notices: A Consumer Reading Guide
What Georgia residents should know about the state breach-notification framework and why the law’s scope should be read carefully.
9–12 min readRead guide →
Pennsylvania Data Breach Notices: What Residents Should Check
A consumer guide to Pennsylvania’s updated breach law, including health data, account credentials, state reporting, and monitoring provisions.
9–12 min readRead guide →
Ohio Data Breach Notices: What Residents Should Know
How to read Ohio’s material-risk breach rule, 45-day outer timing language, and the personal information categories in the statute.
9–12 min readRead guide →
North Carolina Data Breach Notices: What Consumers Should Check
A plain-language guide to North Carolina’s notice content, Attorney General reporting, and the account and credit details residents should verify.
9–12 min readRead guide →