How to respond when you suspect your information was exposed by a breached service.
Short answer
Verify what was actually exposed before assuming the worst. Change compromised or reused passwords, enable MFA, and be alert for targeted phishing.
Try to identify the affected service and what information it says was exposed.
Prioritise password changes if passwords or authentication information may have been compromised.
Review important accounts for unusual sign-ins or password-reset attempts.
Treat follow-up messages with caution because attackers may use breached information to make scams look convincing.
Check it now
A practical check for what to do when personal information has been exposed online.
Open the checkSomething already happened?
If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
Keep exploring