ITRC Fact Sheet 129 - I Received a Security Breach Letter:
What Do I Do Now?
It can be unnerving to be told that your information has been compromised in a breach. There are some steps you can take at this time. Please note: Neither the police nor experts know if a breach incident will result in identity theft. Unless you know otherwise, you are NOT an identity theft victim.
In fact, there have been millions of people notified that their information may have been breached who have not become victims. Studies have shown that the faster the breach information is made public, the less chance a thief will use the stolen data. However, they may warehouse the information. It is important to monitor monthly billing statements and your credit reports.
Your response to this breach will depend on the type of information that was compromised. Should you become a victim of identity theft, help is just a phone call or email away.
Financial Account Numbers:
This includes checking accounts, credit cards, money market funds, stocks, and bank accounts:
- Close ONLY the affected accounts and have account numbers changed.
- Password protect all your accounts, the new ones as well as the closed. This restricts thieves from re-opening closed accounts.
- Monitor your account and billing statements closely
- Report any fraudulent activity immediately to the bank and law enforcement.
Social Security Numbers:
Call the credit reporting agencies. These are automated and secure systems. Place a fraud alert with each agency and request a free copy of each of your credit reports. It is free because your information was breached and you are a potential victim of identity theft. Do this for any person whose Social Security Number (SSN) was compromised. If the SSN belongs to a child, you should hear that there is no report available for that child unless the information has been used. In that case, you will be told the report is not available for viewing. (See ITRC Fact Sheet 120A – To Order a Child’s Credit Report).
We recommend that you call all agencies and not just one. Check your report carefully for any irregularity. Sometimes people see errors on the report that were pre-existing the information breach. If so, contact the police and the ITRC for assistance.
- Experian: (888) 397-3742, www.experian.com
- Equifax: (800) 525-6285, www.alerts.equifax.com, TDD: (800) 255-0056
- TransUnion: (800) 888-4213, www.transunion.com, TDD: (877) 553-7803
Use the annual credit reports system www.annualcreditreport.com to monitor your credit report over the next year. Stagger them throughout the year by ordering one every four months.
Other:
- If your auto or medical insurance policy information is involved, ask the company about their policy to protect compromised policies.
- If it is HR data that was compromised, change account numbers for your 401-K, life insurance, and accounts holding your stock options. Password protect these accounts.
- Driver’s License’s - contact your state Department/Bureau of Motor Vehicles and notify them of the theft. They most likely will not change your number.
Other Resources:
- The Federal Trade Commission has an excellent website with information on data breaches and other consumer issues. Their hotline number is 877-438-4338.
- Your state Identity Theft Victim Assistance Program is typically found on the Attorney General’s website
This fact sheet should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims for their
own use, should be directed to ITRC@idtheftcenter.org.
© Copyright 2010 by Identity Theft Resource Center. Created by ITRC staff.