iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Act promptly, but do not panic: a breach notice confirms that your Social Security number (SSN) was exposed, not that someone has already used it. Read the notice, claim any monitoring it specifically offers, check your credit reports, and decide whether to place a free credit freeze or fraud alert. If you find an unfamiliar account, charge, tax notice, medical bill, or employment record, switch immediately to the identity-theft recovery steps below.
This guide applies to consumers in the United States and reflects current Federal Trade Commission (FTC), IdentityTheft.gov, IRS, and Social Security Administration (SSA) guidance.
First, distinguish exposure from identity theft
Companies send breach notices when information may have been accessed, copied, or otherwise exposed. The notice does not prove that a criminal has opened an account, taken money, filed a tax return, or used your SSN for employment. Treat exposure as a reason to increase your defenses and monitoring, while treating any confirmed misuse as an active identity-theft case.
Warning signs include an unexplained bank withdrawal, an unfamiliar credit account or charge, debt-collection calls for debts you do not owe, medical bills or insurance activity you do not recognize, an IRS letter about a return you did not file, or an employer record that is not yours. A notice that your information was compromised is itself a reason to begin the preventive steps; it is not, by itself, proof of one of these outcomes.
#1 Best Overall
What to do in the first 24 hours
1. Read the breach notice carefully
Confirm which organization sent it, the incident date, the information involved, and the deadline or enrollment code for any assistance. Follow the instructions in that notice. If it offers free credit monitoring or identity-monitoring services, enroll through the channel specified in the notice; do not assume an offer exists when the notice does not state one. Save the letter, email, enrollment confirmation, and terms so you know how long the service lasts and what it covers.
2. Check all three credit reports
Obtain your reports through AnnualCreditReport.com, the federally authorized source identified by the FTC. Look for accounts, hard inquiries, collection items, addresses, and payment activity you do not recognize. IdentityTheft.gov says consumers can check reports weekly for free, so repeat the review rather than relying on a single check. Mark each questionable entry and download or print the reports for your records.
3. Secure your existing accounts
Change passwords for the breached service and for any other account that reused that password. Turn on multifactor authentication where available, beginning with email, banking, tax, and mobile-carrier accounts. Review recent logins, recovery email addresses, phone numbers, and payment methods. These actions protect accounts that may be reached through information associated with the breach, even though they do not replace a credit freeze or fraud alert.
Free tools Windows power users keep installed
One-click scans. No signup required.
4. Choose a credit freeze, fraud alert, or both
Both options are free, but they work differently. A freeze blocks most prospective creditors from accessing your credit report. A fraud alert tells businesses to take additional steps to verify an applicant’s identity. Neither option guarantees that every form of identity theft will stop, and neither replaces checking your reports and accounts.
Credit freeze versus fraud alert
| Option | What it does | How to request it | Duration and trade-off |
|---|---|---|---|
| Credit freeze | Restricts access to your credit report, making it harder to open many new credit accounts in your name. | Request it separately from Equifax, Experian, and TransUnion. Use the current bureau links in the IdentityTheft.gov directory. | Free and remains until you lift or remove it. You may need to temporarily lift it before a lender, landlord, insurer, utility, or other service provider can run a credit check. |
| Initial fraud alert | Asks businesses to verify your identity before issuing credit. | Contact one nationwide bureau; it must notify the other two. | Free for one year and renewable. It is less restrictive than a freeze because businesses may still issue credit after verification. |
| Extended fraud alert | Provides stronger notice to potential creditors that you experienced identity theft; creditors must contact you before issuing credit. | Contact a bureau and provide an FTC Identity Theft Report and the required forms. | Free for seven years. It is intended for people who have experienced identity theft, not merely those who received a breach notice. |
A freeze is generally the stronger preventive choice when you do not expect to apply for new credit soon. An initial alert may be more convenient if you are applying for credit and do not want to manage temporary lifts. You can ask one bureau about an alert while freezing reports separately at all three; keep confirmation numbers and security credentials in a secure place. Procedures and contact details can change, so use the current bureau directory at IdentityTheft.gov rather than an old phone number copied from another article.
If you find an account or transaction you did not authorize
Contact the business’s fraud department
Call the company where the account or charge occurred using a number from its official statement or website, not a number in a suspicious message. State that the account or transaction is not yours and that your personal information may have been exposed. Ask the company to close or freeze the account, stop collection activity, remove fraudulent charges, and send written confirmation. Ask what documents it needs and where to send them.
Create a documented paper trail
- Record the date, time, representative’s name or identification number, phone number, and case number for every call.
- Save statements, emails, letters, screenshots, police reports if obtained, and copies of identification documents sent.
- Use a separate folder for each creditor or provider so deadlines and responses do not get mixed together.
- Continue checking statements after the company closes an account; related attempts may appear later.
Report the identity theft at IdentityTheft.gov
IdentityTheft.gov is the federal government’s one-stop reporting and recovery service. The information you submit generates an FTC Identity Theft Report and a recovery plan tailored to the facts you enter. Save or print both. The plan explains how to contact businesses, dispute information with credit bureaus, and handle other affected accounts. The FTC does not resolve each individual consumer complaint, but reports support law-enforcement investigations and trend analysis.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Request blocking of fraudulent credit-report information
If an unauthorized account or collection appears on a credit report, IdentityTheft.gov explains how to send the bureaus your FTC Identity Theft Report, proof of identity, and a description of the fraudulent information. Ask the bureaus to block the items that resulted from identity theft, and keep proof of delivery and copies of everything submitted. Review updated reports to confirm that the entries were addressed.
Protect yourself from tax identity theft
Could someone file a tax return with your SSN?
Yes. A thief may use an SSN to submit a fraudulent tax return and claim a refund before the real taxpayer files. An exposed SSN does not mean this has happened, and the guidance does not say that every exposed SSN requires Form 14039.
What to do if the IRS contacts you
- Read the IRS notice and follow its instructions. Use the contact method and reference number printed on the notice.
- If the notice says a return or refund was filed using your SSN and you did not file it, respond as directed and complete IRS Form 14039 when the IRS or IdentityTheft.gov instructions call for the identity-theft affidavit.
- Keep a dated log of letters, calls, documents, and submission confirmations.
- File your legitimate return as early as you reasonably can in future years and respond promptly to any IRS letter.
Do not send tax records or your SSN to an unsolicited caller who claims to be from the IRS. Verify contact details through the notice or an official IRS channel.
Check for employment misuse
An exposed SSN can be used to report wages for a job you never held. Review your earnings and work history through a my Social Security account. If you see an employer or wages that are not yours, contact a local SSA office about correcting the record and keep the case information. IdentityTheft.gov also describes an E-Verify account lock that can help prevent an SSN from being used for employment-verification purposes; review the current E-Verify procedure before enrolling because account steps can change.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsMedical, banking, and other warning signs
Credit reports do not show every form of identity theft. Review bank and brokerage statements for withdrawals, transfers, new payees, and changed contact details. Check health-insurance explanations of benefits, provider bills, and prescription records for care you did not receive. Watch government correspondence, utility bills, mobile accounts, and collection notices for unfamiliar activity. Contact the organization shown on the record, request its fraud process, and add the incident to your IdentityTheft.gov recovery plan.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Ignore “your SSN is suspended” calls
Scammers impersonating SSA may claim that your number is suspended, linked to a crime, or about to be cancelled. The FTC’s IdentityTheft.gov guidance states, “Your Social Security number is not about to be suspended,” and “SSA will never call to threaten you or your benefits.” Do not provide your SSN, bank details, one-time codes, or payment to an unexpected caller. SSA staff may call people with ongoing business, but they will not threaten you or demand wire transfers, cash, or gift cards. Hang up and report the scam at ReportFraud.ftc.gov.
When a new Social Security number is, and is not, an option
An exposed number alone is not normally enough to obtain a replacement SSN. IdentityTheft.gov says a person generally needs evidence that the number is being misused and that the misuse is creating serious, continuing problems. Even when SSA approves a new number, organizations may retain records linking you to the old one, so a replacement does not erase your credit, tax, employment, or medical history. Concentrate first on freezes or alerts, disputes, account corrections, and monitoring.
A practical monitoring schedule
Today
- Save the breach notice and enroll in any monitoring it explicitly offers.
- Change reused passwords and enable multifactor authentication.
- Pull all three credit reports and flag unfamiliar entries.
- Place a freeze or initial fraud alert based on your expected credit needs.
Each week for the next several months
- Check credit reports, bank and card statements, email security alerts, and mail.
- Follow up on every dispute and record deadlines.
- Watch for tax, medical, employment, collection, or government notices that do not fit your activity.
Whenever you see a red flag
- Contact the affected business’s fraud department immediately.
- Update your IdentityTheft.gov report and recovery plan.
- Notify the relevant bureau, IRS, SSA, bank, insurer, or law-enforcement agency as the facts require.
Common mistakes to avoid
- Assuming exposure proves fraud: keep defenses in place without claiming misuse you cannot document.
- Freezing only one bureau: a freeze must be requested separately from Equifax, Experian, and TransUnion.
- Relying on monitoring alone: monitoring can alert you, but it does not block every account, tax, employment, medical, or bank misuse.
- Using links in unexpected messages: type official addresses yourself or use the links in a trusted breach notice.
- Paying a caller for “SSA protection”: SSA does not demand money, gift cards, cash, or wire transfers to prevent suspension.
- Applying for a new SSN immediately: replacement is unusual, requires evidence of serious misuse, and may not solve record-linking problems.
What to keep for your records
Maintain a secure file containing the breach notice, monitoring enrollment details, credit-report copies, freeze or alert confirmations, IdentityTheft.gov report and recovery plan, dispute letters, delivery receipts, account case numbers, IRS or SSA correspondence, and a timeline of every contact. This file makes it easier to prove what happened, meet response deadlines, and show a creditor or government agency which information is fraudulent.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
