Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Start by checking what the breach exposed. If it included a password, change it on the affected service and anywhere you reused it. If it included your Social Security number or credit information, check your credit reports and consider a free credit freeze with all three U.S. credit bureaus. Then secure important accounts, watch for suspicious activity, and use the Federal Trade Commission’s IdentityTheft.gov data breach response for steps tailored to your situation.
1. Find out what information was exposed
Read the notice from the breached organization closely. It should explain what information was involved and may describe steps or services offered to affected customers. The response depends on whether the exposed data included login credentials, a Social Security number, financial account details, or other personal information.
Use the FTC’s data breach response tool to get guidance based on the type of information exposed. The FTC also explains the process in its consumer guidance on data breaches.
2. Secure exposed passwords and accounts
Change exposed and reused passwords
Change the password for the affected account as soon as possible. Also change it anywhere else you used the same or a similar password. Give every account a unique password; a password manager can help create and keep track of them. The FTC’s guidance on protecting personal information recommends strong, unique passwords.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Enable multifactor authentication
Turn on multifactor authentication (also called two-factor authentication) for important accounts, especially email, banking, credit cards, payment apps, social media, and tax-filing accounts. This adds a second check beyond your password.
When an account offers several choices, an authenticator app or a physical security key generally offers stronger protection than a code sent by text or email. Text codes can be vulnerable to SIM-swap attacks. The FTC says, “Security keys are the strongest method of two-factor authentication because they don’t use credentials that hackers can steal.” A physical key works only with services that support it; check the account’s security settings before buying or setting one up. See the FTC’s two-factor authentication guidance.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
3. Check for misuse and account takeovers
Look through bank and credit-card statements, bills, and credit reports for unfamiliar charges, withdrawals, or accounts. If you spot activity you do not recognize, contact the relevant financial institution or company using a phone number or website you know is legitimate.
If you think an online account has been taken over, change its password, sign out of all devices or sessions if the service provides that option, and enable two-factor authentication. The FTC has specific recovery steps for hacked email and social media accounts.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
4. If Social Security or credit information was exposed
In the United States, consider placing a credit freeze with Equifax, Experian, and TransUnion. A freeze is free, does not affect your credit score, and makes it harder for someone to open a new credit account in your name. You must contact each of the three bureaus to place a freeze; you can later lift it when you need a creditor to access your report. The FTC explains how to place a freeze or fraud alert.
A fraud alert is another free option. It asks lenders to take steps to verify your identity before opening new credit, while a freeze blocks prospective creditors from accessing your credit report. Which option fits depends on your circumstances. These instructions are U.S.-specific; readers elsewhere should consult their national consumer-protection and credit-reporting authorities.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
5. Use recovery services, but understand their limits
If the breached organization offers affected customers free credit monitoring or identity-theft insurance, the FTC advises taking advantage of the offer. Check the notice for eligibility, enrollment instructions, and any time limits. Monitoring may help you spot possible misuse, but it does not stop someone from reusing a stolen password or prevent new credit accounts from being opened. It is not a substitute for securing accounts, checking activity, or using a credit freeze when appropriate.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If you suspect identity theft, report it at IdentityTheft.gov to get an official recovery plan. The FTC’s identity theft guidance explains the steps and related protections.
6. Avoid fake breach-help messages
After a breach, scammers may pose as the affected company or offer help. Do not follow unexpected links or give a caller, email sender, or texter your password or verification code. Instead, contact the organization through a website or phone number you already know is genuine. The FTC’s advice on protecting personal information from hackers and scammers covers safer ways to respond.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
