What should I do if my employer was hit by the ShinyHunters hack?

Do not wait for perfect information after a possible employer breach. Secure important accounts, freeze credit, and treat urgent reset messages as potential phishing.

Until your employer confirms what was exposed, assume attackers may have work contact details and enough context to make convincing phishing messages. Turn on multifactor authentication, freeze your credit with all three bureaus, monitor important accounts, and expect fake password-reset or payroll messages aimed specifically at employees. Open the employer, bank, or benefits site yourself from a saved bookmark; do not use links or phone numbers in an unexpected alert.

Why an employer breach puts your personal accounts at risk

Attackers who break into an employer's systems may take names, work emails, phone numbers, and payroll details. That is enough to build phishing messages that look like they came from your own workplace, and to try stolen details against your personal accounts. Acting early limits the damage.

What to do, step by step

1. Do not click links in urgent reset or payroll alerts; open services yourself from a saved bookmark.
2. Change your work password, then any personal password that resembles it, and turn on multifactor authentication.
3. Freeze your credit with all three bureaus.
4. Watch bank and email accounts closely for changes you did not make.
5. Ask your employer what data was exposed and what help they offer.