iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Start with the breach notice, not with a paid monitoring subscription. Identify exactly what information was involved, when the incident occurred if the notice says, and which actions the affected organization recommends. Exposure does not prove that anyone has used your identity. Secure accounts immediately, protect your credit when financial or Social Security data may be involved, and use the Federal Trade Commission’s free IdentityTheft.gov process if you find evidence of misuse.
Exposure is not the same as identity theft
A company can confirm that your information was accessed, lost, or disclosed without knowing that a criminal has used it. Treat the notice as a reason to investigate and reduce risk, not as proof that fraudulent accounts already exist.
What to learn from the notice
- Which data was involved: Examples can include a username and password, bank or card information, a Social Security number, medical information, tax information, or a child’s personal details. The right response depends on the category.
- When the incident occurred: Record the date or date range if the notice provides one. Keep the letter, email, and any attached instructions.
- What the organization recommends: Follow its account-reset, card-replacement, or identity-protection directions, but verify contact details independently if the message is unclear or you are worried it could be impersonated.
- How to ask questions: Use a phone number, website, or mailing address you already know belongs to the organization rather than relying solely on a link or number in an unexpected message.
There is no universal response deadline or single data list that applies to every breach. If the notice does not explain what was exposed, ask the organization’s fraud or privacy department for clarification.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Warning signs that information is being misused
The FTC identifies several signals that deserve prompt investigation:
#1 Best Overall
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
- Withdrawals, charges, transfers, or other account activity you do not recognize.
- Unexpected bills, missing bills, or unfamiliar accounts on a credit report.
- Debt-collection calls or letters for debts you did not incur.
- Medical bills, claims, records, or treatment notices for care you did not receive.
- Unexpected tax notices, refund problems, employment records, or government-benefit correspondence.
A suspicious sign is evidence to act on, but the absence of a warning sign does not prove that no misuse occurred. Continue checking the accounts and records connected to the exposed information.
What to do first
1. Secure the affected account
If the notice names a bank, card, phone, utility, email, shopping, or other online account, contact that provider’s fraud department. Ask whether the account should be locked, replaced, or closed and whether transactions or logins can be investigated. Change the affected password or PIN immediately. If you reused that password elsewhere, change those accounts too.
Use a strong, unique password for each account and turn on multifactor authentication (MFA) wherever it is offered. As the FTC explains, “Multi-factor authentication makes it harder for scammers to log in to your accounts if they do get your username and password.” MFA does not make a compromised account irrelevant: reset the password and follow the provider’s instructions even after MFA is enabled.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →2. Check money movement and account settings
Review recent statements, online transaction histories, payment methods, recovery email addresses, phone numbers, and login activity. Report unfamiliar activity to the provider promptly and ask what documentation it needs. Continue checking for new transactions, replacement cards, changed contact details, or other activity you did not authorize.
For a compromised phone or utility account, ask the provider’s fraud team whether the account needs a new PIN, account number, or other security change. For an online account, review sessions and connected devices and remove access you do not recognize using the provider’s own security controls.
Rank #2
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
3. Preserve the evidence
Save the breach notice, screenshots of suspicious activity, statements, account numbers, and messages. Make a dated log of every call, email, case number, representative’s name, and promised action. This record makes it easier to dispute an item and to show what happened if several organizations become involved.
Protect your credit when credit data or your Social Security number was exposed
A credit freeze and a fraud alert are both free, but they work differently. Choose based on how much access you want to restrict and whether you have evidence of identity theft.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors| Protection | How it limits access | Who you contact | How long it lasts | Identity Theft Report required? |
|---|---|---|---|---|
| Credit freeze | Restricts prospective creditors’ access to your credit report, making it harder to open a new credit account in your name. | Request it separately from Equifax, Experian, and TransUnion. | Until you temporarily lift it or remove it. | No. |
| Initial fraud alert | Businesses that see the alert must take reasonable steps to verify the identity of someone applying for credit. | Contact one of the three nationwide bureaus; that bureau must notify the other two. | One year. | No. |
| Extended fraud alert | Provides the same verification signal for a longer period for an identity-theft victim. | Follow the current submission instructions of a bureau. | Seven years. | Yes. An FTC Identity Theft Report supports the request. |
When a freeze is the better first choice
Use a freeze when you want the strongest barrier against new-credit applications, especially after exposure of a Social Security number or other information used in credit applications. You must place the freeze with all three bureaus; freezing one does not freeze the other two.
A freeze does not stop activity on existing accounts, prevent all kinds of fraud, or replace password changes. It also does not permanently prevent you from applying for credit. When a legitimate lender, landlord, insurer, utility, or other service needs to check your file, temporarily lift the freeze according to the bureau’s instructions and restore it afterward.
When a fraud alert may fit
An initial fraud alert can be useful when you want businesses to take an extra identity-verification step without managing three separate freeze requests. Contact one bureau and it must notify the other two. The initial alert lasts one year; you can follow the current bureau instructions if you need another alert later.
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
If you have an FTC Identity Theft Report, you can request an extended fraud alert that lasts seven years. The bureau may require the report and other supporting documents, so keep the completed FTC materials available.
Check all three credit reports
The FTC identifies AnnualCreditReport.com as the official source for free credit reports and says current recovery guidance allows weekly checks. Review each report for unfamiliar accounts, hard inquiries, addresses, collection accounts, or balances. A bureau may show information that another does not.
Dispute inaccurate or fraudulent information with the relevant bureau and the business that supplied it. Follow each organization’s required method and keep copies of your dispute, supporting documents, and delivery confirmation. A freeze or alert does not remove an account that is already reporting; disputes address the inaccurate item itself.
Report confirmed identity theft and create a recovery record
If someone has used your information, report it through IdentityTheft.gov. The FTC’s guided process creates an Identity Theft Report and a recovery plan tailored to the type of misuse.
- Complete the guided report with the facts you know, including affected accounts, dates, and companies.
- Save or print the Identity Theft Report and recovery plan. Keep a digital copy and a paper copy in a secure place.
- Contact each business connected to the fraudulent account or charge. Ask it to close or secure the account and explain its dispute process.
- Use the FTC’s sample letters when requesting records, correcting an account, or asking a company or bureau to block identity-theft information.
- Record every contact and deadline. Send documents by the method the recipient specifies and retain proof that you sent them.
An FTC Identity Theft Report can support a request to block information that resulted from identity theft from your credit reports. The FTC’s rights guidance describes the report and supporting documents a bureau may require.
Recommended Free Tools
Rank #4
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
When to involve law enforcement
Some businesses, creditors, or agencies may ask for a police report. The FTC recovery guidance says to bring your FTC Identity Theft Report, photo identification, proof of address, and other evidence when reporting to police. Ask the investigator for the report number and keep it with your recovery records.
Use the route that matches the type of misuse
A general credit checklist cannot resolve every case. Follow the instructions for the specific agency, provider, employer, or bureau involved.
Tax identity theft
If the IRS tells you that someone used your Social Security number for a tax return or refund, follow the notice’s instructions and the tax-specific steps in IdentityTheft.gov. File your legitimate return as early as you can and respond promptly to IRS letters. Do not send tax documents to a contact method that you have not independently verified.
Child identity theft
If an account or collection notice involves a child, contact the business that reported it and establish that the person is a minor. Use IdentityTheft.gov, then follow the credit bureaus’ current procedures for manually checking whether a child has a credit file or for placing a child-specific freeze. A normal adult credit-monitoring routine may not reveal a child’s misuse.
Free tools Windows power users keep installed
One-click scans. No signup required.
Medical identity theft
Check medical records, explanation-of-benefits statements, and patient portals for appointments, prescriptions, claims, or diagnoses that do not belong to you. Contact the provider or health plan named in the record, request correction of inaccurate information, and ask what documentation it needs. Keep copies of corrected records and correspondence.
Best Value
- Enhanced Efficiency and Security: Effectively shreds 14 sheets of paper per pass into 5 /32” x 1-9/16” cross-cut particles (Security Level P-4), providing greater security for confidential documents
- Powerful Deskside Shredding: Successfully shreds credit cards, paper clips, staples and unopened junk mail in addition to paper
- Quiet Operation: Minimized noise to prevent distraction in shared workplaces or at home
- Safety Lock for Added Protection: Comes equipped with patented Safety Lock, disabling the machine as needed to protect you, your family or your pets
- Convenient Pull Out Bin to Eliminate Mess: 5-gallon pull out bin neatly contains over 250 shredded sheets
Government-benefit or employment misuse
If someone used your information to claim unemployment, another government benefit, or employment, contact the agency that administers the benefit or the relevant employer-verification channel. Follow that agency’s identity-theft process. A credit freeze alone may not stop or resolve these cases because they can occur outside the credit system.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Understand what monitoring services can and cannot do
Credit monitoring and identity monitoring are different. Before paying for either, determine what information is checked, how often it is checked, which bureaus are included, and what help is provided after an alert.
| Service type | Usually watches for | What it may provide | Important blind spots or limits |
|---|---|---|---|
| Credit monitoring | Changes on one or more credit reports, such as new accounts, inquiries, or balance changes. | Alerts and access to reports or scores, depending on the plan. | It may not detect misuse that never appears on a credit file, including some tax, medical, benefits, or account-takeover activity. |
| Identity monitoring | Signals in other databases or services, depending on the provider’s coverage. | Alerts about selected personal information or records. | Coverage varies widely; an alert is not proof of fraud and no service sees every database. |
| Identity recovery assistance | Not a detection system by itself. | Case managers, help with correspondence, or guidance through disputes. Some services may act for you only with formal authority. | Read exactly what the staff will do, what you must do, and when assistance ends. |
| Identity theft insurance | Not a detection system. | It may reimburse certain recovery expenses, lost wages, or legal fees. | It generally does not reimburse money stolen by a scammer. Deductibles, exclusions, limits, and overlap with homeowners or renters insurance apply. |
Questions to ask before enrolling
- Which credit bureaus and non-credit databases are monitored?
- How frequently are checks run, and how are alerts delivered?
- Are complete reports included, or do they cost extra?
- Does the service provide a recovery specialist, correspondence help, or only self-service instructions?
- Is equivalent coverage already included through your employer, bank, credit union, card provider, or insurer?
- For insurance, what are the deductible, dollar limits, exclusions, and overlap with existing policies?
- What happens when the promotional period ends, and what recurring price applies?
The FTC warns that monitoring services may not alert you to tax-refund fraud or government-benefit fraud. Monitoring is optional; it does not replace a freeze, an alert, account review, or agency-specific reporting.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Protect paper records and avoid follow-up scams
A breach can trigger convincing messages from criminals pretending to be the affected company, a bank, a bureau, or a government agency. Do not disclose passwords, one-time codes, or full account numbers to an unsolicited contact. Verify the organization through contact details you already know are official and initiate the call yourself.
For physical records containing account numbers, Social Security numbers, medical details, or other sensitive information, the FTC recommends shredding them before disposal. A cross-cut shredder can help with that narrow paper-safety task, but shredding does not address information that has already been exposed electronically.
A practical follow-up routine
Today
- Read and save the notice.
- List the exposed data, incident date or range, and affected accounts.
- Contact the affected provider through an independently verified channel.
- Change compromised or reused passwords and PINs; enable MFA.
- Report and document unfamiliar transactions.
- Place a freeze with all three bureaus or an initial fraud alert through one bureau when appropriate.
During your continuing review
- Check statements and account activity for transactions, withdrawals, charges, or account changes you do not recognize.
- Review all three credit reports through AnnualCreditReport.com and dispute inaccurate or fraudulent entries.
- Watch for unfamiliar bills, collections, medical records, tax notices, benefit notices, and employment records.
- Update your contact log whenever a company, bureau, agency, or police department gives you a case number or next step.
If you find misuse
- Report it at IdentityTheft.gov and preserve the resulting report and recovery plan.
- Secure or close the fraudulent account with the business involved.
- Dispute fraudulent credit-report information with both the business that supplied it and the relevant bureau.
- Use the specialized tax, child, medical, benefit, or employment route that matches the case.
- Provide the FTC report and supporting identification if a police report or an extended fraud alert is needed.
Common mistakes to avoid
- Assuming exposure equals theft: Investigate for warning signs instead of declaring fraud without evidence.
- Freezing only one bureau: A freeze must be requested separately from Equifax, Experian, and TransUnion.
- Changing only one password: Reused credentials can expose other accounts.
- Relying on monitoring alone: Monitoring may miss tax, benefit, medical, or other non-credit misuse.
- Ignoring existing accounts: A credit freeze mainly addresses new-credit applications; it does not review transactions on accounts you already have.
- Discarding records: The notice, reports, letters, case numbers, and statements can be essential evidence.
- Using a generic checklist for a special case: Tax, child, medical, benefit, and employment misuse each has a different reporting path.
Bottom line
Read the notice closely, secure the affected accounts, and match your response to the data exposed. Use a free credit freeze or fraud alert when credit information is at risk, check your reports and statements, and report confirmed misuse through IdentityTheft.gov. Paid monitoring can add alerts or recovery help, but its coverage is limited and it is not a substitute for these actions.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
