What to Do If Your Personal Information Is Compromised

"I've been notified that my personal information has been exposed. What should I do next?"

Identity theft occurs when someone uses your personal or financial information without your permission. If your information was exposed in a data breach or security incident, taking action quickly can help reduce the risk of fraud and identity theft.

Signs of Identity Theft

You may not know immediately that someone is using your information. Watch for the following warning signs:

  • Bills for purchases you did not make
  • Collection notices for accounts you never opened
  • Unrecognized accounts on your credit report
  • Denied loan or credit applications without explanation
  • Missing mail or mail that suddenly stops arriving
  • Unexpected account notifications or password reset messages

Protect Yourself if Your Information May Have Been Compromised

Watch for Scams

Following a data breach, criminals may attempt to use exposed information in scams.

Be cautious of:

  • Phone calls claiming you owe taxes or unpaid debts
  • Requests for payment using gift cards, wire transfers, or cryptocurrency
  • Messages requesting your Social Security number, passwords, or other sensitive information
  • Individuals claiming to represent government agencies without verification

Remember:

  • The IRS will not threaten arrest or demand immediate payment over the phone.
  • Never provide personal information unless you have independently confirmed the identity of the person or organization contacting you.

Continue Monitoring Your Accounts

Regularly review:

  • Credit reports
  • Bank account activity
  • Credit card statements
  • Online account activity
  • Security alerts from financial institutions

Report suspicious activity immediately to the affected organization and your financial institution.

Additional Resources

By acting quickly and monitoring your accounts regularly, you can help protect yourself from identity theft and minimize the impact of a potential data breach.