So, have you received a letter, email, or other notification that you might be affected by a recent cyber security breach?
Did you get a sick feeling in the pit of your stomach?
Depending on what website, government agency, or financial institution has been breached will depend on what amount of your personal information has been put at risk.
But no matter what entity it is that has been breached, the most important question is… What do you do now?
Before we get into some steps you can take to protect yourself, if you haven’t already read my articles on Online Safety & Online Security as well as How Data Breaches Can Put Your Information at Risk, please take some time to do so.
It will give you a great base level of knowledge which will help you better understand our future articles delving more deeply into several areas related to your Online Safety & Online Security.
User Notification Delays
Once you’ve recovered from the shock that the entity you entrusted with your personal data has violated that trust… now you’re getting even more bad news…
What you don’t know is, and if you’re lucky it will be spelled out somewhere in the notice you just received…
You’re already starting from behind!
Let’s examine… we’ll use the ‘Good News vs Bad News’ analogy…
Let’s start with the ‘Good News’ (if there actually is any such thing in this situation)…
The Silver Lining is that MOST companies don’t store all of your data together in the same databases.
So, while some of your personal information may have indeed been compromised, it may only be a small portion… hopefully not your Personal Identifying Information (PII).
How will you know what information has been compromised?
Generally speaking, the type of information compromised is usually included in the notification you receive.
Now for the ‘Bad News’ – right now you’re probably like… “some hacker has my personal info… what more bad news is there?”
I’m sorry to say that many times when these data breaches occur, users are not the first to know.
Most often a considerable amount of time has passed between the actual breach occurring and the time that users are notified.
How much time are we talking?
Well, honestly, the time frames vary greatly, but it’s not an exaggeration to say that months… at least… have passed.
Why is this?
For any number of reasons… they were taking time to secure their network, survey the extent of the breach, decide how to notify users, or prepare resources.
Personal Data Protection
Taking steps to protect your personal information should begin long before you click anything online.
But sometimes, even after you have taken preventative steps… the unthinkable can happen.
If your personal data is compromised, there are steps you should take to help reduce further damage.
While this is not meant to be an ‘all inclusive’ list, these should be considered reasonable for the situation.
Here are some steps you can take if you’ve been the victim of an online data breach:
1. Confirm If and What Data Was Accessed
In the cases of some recent breaches we told you about, you may have given your information to one or more of these, but that doesn’t definitively prove that it was YOUR data that was compromised.
Even if your info may not have been part of the breach, it still makes sense to take precautions.
In 2026, you don’t have to wait for a company to tell you… you can be proactive.
Consider using a data breach notification service. One popular option is Have I Been Pwned?… its a free service that allows you to check if your email address has been found in any known data breaches.
This can give you a head start on securing your accounts before you even get an official notification.
2. Change Your Passwords & Secure Your Accounts
[INSERT PASSWORD IMAGE] Then there is your password… this is probably one of the most common points of failure.
Most people accomplish this by reusing their passwords.
When hackers get their hands on some of your information, testing these options is among the first things they try.
This is doubly critical if you hold cryptocurrency… if the password associated with your email or exchange account is reused, a hacker can gain access to and drain your entire crypto portfolio… there is no recourse.
There are options to help you… like password managers.
I discuss this in greater detail in post on secure passwords. [LINK: Secure Password]
3. Freeze Your Credit
If your card or bank information is stolen, contacting your financial institution is imperative… but you should go one step further.
Contact the three major credit bureaus (Equifax, Experian, and TransUnion) and request a credit freeze.
This is the single most effective way to prevent a thief from opening new accounts in your name… it’s more robust than a simple fraud alert and is now free to do.
Perhaps consider cancelling that specific credit card and having your bank issue another is the way to go.
Read More About Credit & Information Monitoring Here [LINK: CREDIT MONITORING]
4. Watch Out for SIM Swap Attacks
This is a critical modern threat that targets your phone number.
In a SIM swap attack, a hacker tricks your mobile carrier into transferring your phone number to their SIM card.
This allows them to bypass SMS-based two-factor authentication (2FA) and gain access to your most sensitive accounts, including crypto exchanges and email.
To prevent this, call your mobile carrier and ask to set up a unique PIN or password on your account.
This adds a layer of security that only you can bypass.
5. Monitor Your Information & Accounts
Frankly, this final suggestion is probably something that is a good practice to do on a consistent basis.
By keeping an eye on your accounts regularly, you increase the chances that you will notice any fraudulent activity quickly and thus allow you to take the necessary measures immediately.
Pulling Your Options Together
The chances of becoming the victim of an online data breach is on the rise.
However, suffering the adverse effects from it can be minimized in most cases.
Taking a proactive approach to your online privacy & security is certainly best… but if you still become a victim… taking steps to protect yourself only makes sense.
By using various email accounts as well as using encrypted email like Protonmail… you can control any accounts that may become part of an online data breach.
Couple this with using strong, unique passwords and you can significantly help protect your security online.
Your Action Plan
Receiving a breach notification is a call to action… don’t ignore it… don’t panic…
Follow the steps… confirm the breach… change your passwords… freeze your credit… secure your phone number… and monitor your accounts.
This is your new, non-negotiable action plan.
It’s your responsibility to protect yourself in a digital world where the companies holding your data have proven they can’t always be trusted.
To make this process easier, I’ve compiled the tools I recommend for each of these steps… from password managers to monitoring services on the My Toolbox Page.
It’s your one-stop shop to start securing your digital life today.
