Breach Stories
A breach notice arrived. Start with what was exposed.
A breach notice is useful when it helps you decide what to protect first. Start with the data—not the drama.
1. Confirm the notice
Go to the organization’s official website or app yourself. Look for its incident notice and support information instead of using links or phone numbers in an unexpected message.
2. Identify what was exposed
- Password: change it there and anywhere it was reused.
- Email or phone: expect more convincing phishing and verify requests through a separate channel.
- Payment card: review transactions and follow the issuer’s replacement or dispute process.
- Social Security number or identity data: consider a credit freeze and monitor official reports.
3. Keep evidence, then move on
Save the notice and a short record of the actions you took. You do not need to monitor every headline; focus on the accounts and records connected to the exposed data.
Primary sources
Reviewed September 27, 2026.