Stolen personal data: what to do?

Discovering that your personal data has been stolen can be alarming, but taking swift action can significantly reduce the risk of identity theft and financial loss. This guide outlines practical steps to secure your information and respond effectively.

What Is Happening?

Personal data theft occurs when someone gains unauthorized access to sensitive information such as your name, address, Social Security number, bank account details, or passwords. This can happen through data breaches, phishing, lost devices, or stolen documents. The stolen data may be used to open fraudulent accounts, make unauthorized purchases, or commit identity theft.

What to Do First

1. Secure your accounts: Immediately change passwords for any compromised accounts, especially email, banking, and social media. Use strong, unique passwords and enable two-factor authentication (2FA) wherever possible.
2. Contact your bank and credit card companies: Report any suspicious activity or unauthorized transactions. They can freeze or close affected accounts and issue new cards. Ask them to flag your accounts for fraud alerts.
3. Place a fraud alert or credit freeze: Contact one of the major credit bureaus (Equifax, Experian, TransUnion) to place a fraud alert, which makes it harder for someone to open credit in your name. A credit freeze is a stronger step that restricts access to your credit report.
4. Report the theft: File a report with the Federal Trade Commission (FTC) at IdentityTheft.gov, which provides a personalized recovery plan. Also report to your local police, especially if you know who stole your data or if it involves physical theft.
5. Review your credit reports: Obtain free copies from AnnualCreditReport.com and check for unauthorized accounts or inquiries.

What NOT to Do

• Do not ignore the breach: Hoping it will go away can lead to bigger problems.
• Do not share more information: Avoid giving out additional personal details unless you have verified the recipient is legitimate.
• Do not click on suspicious links: Phishing emails may try to trick you into revealing more data.
• Do not use the same password across accounts: This makes it easier for hackers to access multiple accounts.

When to Seek Professional Help

If you suspect identity theft, consider consulting a professional such as an identity theft recovery service or a lawyer specializing in fraud. If you receive notices about unpaid bills or debts you don't recognize, contact the companies directly and dispute the charges. In cases where your Social Security number is compromised, you may need to contact the Social Security Administration.

What to Monitor

• Bank and credit card statements: Review them regularly for unauthorized charges.
• Credit reports: Check them periodically for new accounts or inquiries.
• Explanation of Benefits (EOB) from health insurers: Watch for fraudulent medical claims.
• Tax records: File your taxes early and watch for notices from the IRS about suspicious filings.

How to Prevent Future Theft

• Use strong, unique passwords and a password manager.
• Enable two-factor authentication on all accounts that offer it.
• Be cautious with sharing personal information online and offline.
• Shred documents containing sensitive information before disposing of them.
• Monitor your accounts regularly and sign up for breach notifications.

Acting quickly and staying vigilant are key to minimizing the impact of stolen personal data. Start by securing your accounts and contacting your financial institutions, then follow through with monitoring and reporting to protect yourself in the long term.