Data Breach Notification Letter: What to Do Next
You received a letter or email saying your data was involved in a breach. How to confirm it is genuine and exactly what to do depending on what leaked: passwords, cards, ID numbers or contact details.
A breach notification tells you that an organization lost control of some of your data. The letter or email should say what happened and what was involved. Your first job is to confirm it is real. Your second is to act on the specific data that leaked.
Step 1: Confirm it is genuine
- Find the breach notice on the organization's official website, by typing its address yourself.
- Check reputable news coverage of the breach.
- If the email has links or a phone number, verify them against the official site before using them.
Fake breach notices are common. See phishing that follows a data breach.
Step 2: Act on what leaked
| If this leaked | Do this |
|---|---|
| Password | Change it on that site and everywhere you reused it. Turn on two-step verification. |
| Email address | Expect phishing. Use unique passwords and check alerts carefully. |
| Phone number | Expect scam calls and texts. Ask your network about SIM swap protection. See protecting your number. |
| Card number | Tell your bank; consider a new card; watch statements. |
| Bank account details | Tell your bank; watch for direct debits you did not set up. |
| Date of birth, ID or tax numbers | Consider a credit freeze or fraud alert; watch for identity fraud. See leaked ID numbers. |
| Health or sensitive data | Be alert to targeted scams and extortion; check the organization's support offer. |
Step 3: Keep a record
Save the notification, note the date, and record what you changed and whom you contacted. It helps if problems appear later. See keeping a log after identity fraud.
Step 4: Stay alert for months
- Leaked data is used long after the breach.
- Be suspicious of messages that mention the breach or your real details.
- Check your credit record occasionally if ID data leaked. See checking your credit record.
Unsure if a breach notice is real? Paste it into CyberWatch AI Scan for a free check.
For more, see what to do after a data breach in our identity and account security guide.
Frequently asked questions
How do I know a breach notification is genuine?
Look for the notice on the company's official website, or contact it through details you find yourself. Do not click links or call numbers in the email unless you have confirmed they are official.
Should I accept free credit monitoring offered after a breach?
It can be useful. Sign up through the official company page or a trusted provider named on it, not through links in unexpected messages.
Can I get compensation?
Sometimes, depending on the country and case. Genuine claims or settlements are announced publicly. Be wary of firms contacting you promising compensation for a fee.
Sources
- Data breach guidance for individuals, UK National Cyber Security Centre
- Data breach recovery, IdentityTheft.gov (US Federal Trade Commission)
- Credit Freezes and Fraud Alerts, US Federal Trade Commission
