After a Breach at Work: Protecting Your Personal Accounts
Your employer has had a data breach or cyber attack. What it may mean for your personal information and accounts, and the steps to protect yourself from reused passwords and follow-up phishing.
When an employer suffers a breach or ransomware attack, staff data is often caught up in it: HR records, payroll details, ID copies and contact information. Even if work systems are fixed, your personal accounts may be at risk. Here is how to protect yourself.
Find out what was involved
Read your employer's official notice and ask HR which of your data was affected: contact details, ID or tax numbers, bank details, salary, or passwords. The answer decides what you need to do.
Steps by type of data
| If this was exposed | Do this |
|---|---|
| Work password | Change it anywhere you reused it personally. See password reuse. |
| Bank details | Tell your bank; watch for unfamiliar debits. |
| ID or tax numbers | Consider a credit freeze or fraud alert. See leaked ID numbers. |
| Personal contact details | Expect targeted phishing and scam calls. |
| HR or health records | Be alert for extortion attempts; use the support your employer offers. |
Watch for follow-up scams
- Fake HR or payroll emails asking you to "update bank details" or "confirm identity".
- Fake identity protection offers not announced through official channels.
- Calls quoting your work details to sound legitimate.
Confirm any HR or payroll request through your normal HR contact, not the email that asked. See phishing that follows a breach.
Longer term
- Keep work and personal accounts separate. See work vs personal email.
- Use unique passwords and two-step verification everywhere.
- Take up genuine monitoring offered by your employer through official channels.
Got an HR or payroll email after a breach? Paste it into CyberWatch AI Scan for a free check.
For the full process, see how to recover a taken-over account in our complete guide.
Frequently asked questions
What employee data is usually involved?
It varies, but may include names, contact details, ID or tax numbers, bank details, salary and HR records. Your employer's notice should say.
Should I change my personal passwords?
Yes, if you reused your work password anywhere, or if the breach included personal details that secure your accounts.
What scams follow a work breach?
Fake HR and payroll emails, fake 'identity protection' offers, and calls quoting your work details.
Sources
- Data breach guidance for individuals, UK National Cyber Security Centre
- Data breach recovery, IdentityTheft.gov (US Federal Trade Commission)
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
