What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Act in this order: verify the notification, determine exactly what was exposed, secure affected and reused logins, protect your credit if identity data was involved, contact financial institutions, then report and monitor. The right response depends on whether the leak involved a password, payment card, Social Security number, phone account, medical records or identity documents.
1. Verify the breach notice and identify the exposed data
Read the company’s notice carefully and list every data category it names. Look for passwords, email addresses, phone numbers, payment-card details, Social Security numbers, medical information, tax data or identity documents. The required response changes with each category.
Confirm the incident independently. Open the company’s official website or app yourself, or call a phone number from a statement, card or other known record. Do not click links or call numbers in an unexpected email, text or letter; breach publicity often triggers convincing phishing attempts. The Federal Trade Commission’s breach-response guide is at ftc.gov/media/79862, and its tailored consumer checklist is IdentityTheft.gov/Steps.
- Save the notice, its date and the company’s stated support contact.
- Record whether the company says data was viewed, downloaded or merely stored in an affected system.
- Check whether the notice offers credit monitoring or identity-theft assistance, and read the current terms before enrolling.
2. Change exposed and reused passwords, then add MFA
Change the password for the affected account first. Then change every other account that uses the same password or a close variation. Attackers routinely test leaked credentials on email, banking, shopping, cloud and social accounts. Change relevant account PINs as well.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Type the service’s address yourself or use its official app; avoid links in the notice.
- Set a unique, long password that you have not used elsewhere.
- Review active sessions and sign out unfamiliar devices where the service offers that control.
- Turn on multifactor authentication (MFA), preferably an authenticator app or a USB hardware security key when the account supports it.
- Update recovery email addresses, phone numbers and backup codes so an intruder cannot reclaim the account.
The FTC explains that MFA makes it harder for a scammer to log in even with your username and password: consumer.ftc.gov/articles/what-know-about-identity-theft. A password manager can generate and store unique credentials, but it does not replace changing a leaked password.
3. Add credit protection when identity data was exposed
If the notice includes your Social Security number, driver’s-license details, passport information or other data usable to open accounts, obtain your credit reports and choose a preventive control.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
| Control | What it does | When to use it |
|---|---|---|
| Credit report review | Shows unfamiliar accounts, inquiries or addresses that may indicate misuse. | Do this immediately and continue checking for activity. |
| One-year fraud alert | Signals lenders to verify your identity before extending new credit. | Useful when you suspect exposure or attempted fraud. |
| Credit freeze | Restricts access to your credit file, making it harder to open a new account in your name. | Consider this when a Social Security number or identity documents were exposed; temporarily lift it when you apply for credit. |
IdentityTheft.gov explains the freeze and your related rights at IdentityTheft.gov/Know-Your-Rights. A freeze is a preventive measure against new-account fraud; it does not stop takeover of an existing bank, card or email account.
4. Contact banks and card issuers about payment data
Call the institution’s fraud department using the number on your card, statement or official website. Explain what the breach notice says and ask what controls it recommends.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Have the affected card or account frozen or closed.
- Request a replacement card or new account number when appropriate.
- Ask whether additional verification, transaction limits or account alerts are available.
- Review recent and continuing statements for unauthorized charges, withdrawals or transfers.
Report suspicious transactions promptly and keep confirmation numbers, dates and the names of representatives. A compromised payment card generally requires issuer action even when no fraudulent charge has appeared yet.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.5. Report identity theft and monitor for follow-up scams
If you find an unauthorized account, charge or other misuse, report it at IdentityTheft.gov/Steps. The FTC’s process can produce an Identity Theft Report and a recovery plan tailored to the incident.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Continue checking credit reports, bank and card activity, email security alerts and phone-account changes. Treat unexpected calls, texts and emails claiming to offer breach assistance as untrusted until independently verified. Never provide a one-time code, password or full account number to an unsolicited contact.
Match the response to the data exposed
| Exposed information | Priority action |
|---|---|
| Password or login | Change it and reused variants; enable MFA; review active sessions and recovery settings. |
| Payment-card data | Use the issuer’s official fraud channel to freeze or replace the card and monitor transactions. |
| Social Security number or identity documents | Review credit reports, place a fraud alert and consider a credit freeze. |
| Phone-account information | Ask your carrier about an account passcode, SIM-swap or unauthorized-porting protections, and review phone-based MFA methods. |
| Medical or tax information | Use IdentityTheft.gov’s recovery flow and follow the specialized instructions it generates. |
Keep a dated incident log with the notice, calls, case numbers, password-change confirmations and disputed transactions. That record helps prove when you acted and makes follow-up with companies, lenders or the FTC more orderly.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
