Skip to content

You were in a data breach. Here's the calm, correct response

Breach notifications are designed to alarm. A short, ordered checklist does more for your security than panic or a hasty subscription.

Short answer

Respond calmly and in proportion to what was exposed. Change the password on the breached account and anywhere you reused it, and turn on two-factor authentication. If card details leaked, ask your bank for a new card; if identity documents leaked, consider a credit freeze — it's free and blocks most new-account fraud.

PrivacyTechReview Editorial Team Reviewed Oct 12, 2026 5 min read
Illustration: a cracked data cabinet leaking records behind a laptop that shows a checklist under a protective dome
Illustration: PrivacyTechReview editorial

If you use the internet, your data has been in a breach — probably several. A notification is not an emergency by itself; what matters is a calm, ordered response proportional to what was exposed.

Do these first

  1. Change the password on the breached account, and on any other account where you reused it.
  2. Turn on two-factor authentication there, preferably with an app or hardware key rather than SMS.
  3. If payment details were exposed, ask your bank for a new card number and watch statements.
  4. If identifying documents were exposed, consider a credit freeze — it is free and blocks most new-account fraud.

Then slow down

Breach emails often arrive alongside an upsell for monitoring. Monitoring can help, but decide on it deliberately, not under the pressure of the notification. The free credit freeze above neutralizes the most damaging outcome — someone opening accounts in your name — at no cost.

The goal after a breach is not zero risk, which is unattainable. It is to close the specific door that was opened, quickly and without panic.
PT

PrivacyTechReview Editorial Team

Editorial

Our editorial team researches consumer security products using public vendor documentation and independent laboratory reporting.

Related reading