So Your Info Was in a Data Breach. Breathe. Here’s the Plan.
The email arrives: “We are writing to inform you of a security incident that may have affected your personal information.”
Your stomach drops. I understand — I’ve gotten those emails myself, and I’ve sat with clients hundreds of times in that exact moment. So let me tell you the two most important things right up front.
First: this is normal now. Data breaches happen to enormous, well-defended companies. Being in one doesn’t mean you did anything wrong, any more than you’re at fault when the bank down the street gets robbed. Your safe deposit box was in their vault; the vault got hit.
Second: panic is optional, and unhelpful. What matters now is a short list of calm, boring steps. Boring is good. Let’s walk through them in order.
Step 1: Change the Password — There, and Anywhere You Reused It
Start with the breached account itself. Change its password to something long and completely new.
Then comes the step people skip, and it’s actually the most important one: if you used that same password anywhere else, change it in all of those places too. Criminals take leaked passwords and immediately try them on email, banking, and shopping sites — it’s the first thing they do, like a thief finding one key and running around the block trying every door. Can’t remember where you reused it? Your phone can. On an iPhone or Mac, check Settings, then Passwords, then Security Recommendations; Google Password Manager offers the same checkup on Android.
Prioritize your email account above everything. Whoever controls your email can reset all your other passwords, so it’s the master key. Email first, then banks, then the rest.
While you’re in there, turn on two-factor authentication (the setting where a code from your phone is required to log in) on those big accounts. It’s the deadbolt that makes a stolen password nearly useless.
Step 2: Freeze Your Credit (It’s Free, and Easier Than It Sounds)
If the breach included things like your Social Security number or date of birth, this is your power move: a credit freeze.
A freeze tells the three credit bureaus — Equifax, Experian, and TransUnion — not to let anyone open new credit in your name. No new credit cards, no loans, nothing, until you personally unfreeze it. It’s like putting a padlock on your name.
Three things people are always relieved to hear:
It’s completely free. That’s federal law.
It doesn’t hurt your credit score. At all.
It doesn’t affect your existing cards and accounts. Life goes on exactly as before.
You do have to contact each of the three bureaus separately — their websites or a phone call, maybe twenty minutes total. And when you want a new card or loan someday, you just temporarily unfreeze. A small hassle for you; a brick wall for an identity thief. In my book, this is the best deal in all of personal security.
Step 3: Watch Your Statements Like a Mildly Suspicious Hawk
For the next few months, give your bank and credit card statements an actual read instead of a glance. I treat mine the way I treat my grill: you don’t have to hover, but you never wander off for long, because small flare-ups only stay small if somebody’s watching. You’re looking for anything you don’t recognize — and note that thieves often test the waters with tiny charges, a dollar or two, before going big. Small and weird is still worth a phone call.
Two easy upgrades while you’re at it:
Turn on transaction alerts in your bank’s app, so your phone buzzes for every charge. It’s a doorbell camera for your money.
Check your credit reports free at AnnualCreditReport.com — that’s the official site — and look for accounts you never opened.
If you spot fraud, call the bank right away. They deal with this every day; you’ll be a routine Tuesday for them, and that’s comforting.
Step 4: Know When to Call In Help
Most breach cleanups are the do-it-yourself steps above. But bring in reinforcements if:
Someone has actually opened accounts in your name — go to IdentityTheft.gov, the government’s official recovery site, which builds you a personal step-by-step plan.
Money has already left your accounts — your bank, immediately.
Or honestly, if you’d just feel steadier with a calm person walking through it beside you. That counts too.
That last one is where I come in. I taught myself technology back when nobody showed you anything — my teachers were a stack of library books and a whole lot of error messages — so I know exactly what it feels like to face a scary problem with no guide beside you. Making sure you never have to is why Indigo Solutions exists. If you’ve gotten one of those emails, book a session at indigosolutionsllc.com and we’ll lock things down together, one calm step at a time.
Breathe. Then take step one. You’ve got this.