How do I protect my accounts after a data breach?
Quick answer: Act first on any password that was exposed or reused, then monitor the affected account for changes.
Act first on any password that was exposed or reused, then monitor the affected account for changes.
Change the exposed password anywhere it was reused, turn on two-step verification, and watch the affected account for changes.
Why the first 48 hours matter most
After a breach, stolen data moves in waves: dumped, sold, then used. The credentials that get exploited first are the reused ones — the email and password combo tested automatically against banks, shops, and social accounts within days.
What to do, step by step
- Change the breached password everywhere it was reused — that reuse, not the one account, is the real exposure.
- Turn on two-factor authentication for email and banking first; your email resets everything else.
- Freeze your credit with all three bureaus (Equifax, Experian, TransUnion). It is free and blocks new accounts in your name.
Pro tip: Take screenshots of the breach notice and your changes as you make them. If fraud surfaces months later, that dated paper trail is what wins disputes with banks and the bureaus.
Ask AI about this tip
Send this tip to your favorite AI assistant for a plain-language walkthrough, follow-up questions, or help applying it to your device.
Was this helpful?