Identity protection after a data breach or identity theft

Your email address, passwords or ID details can end up in a data breach. Here is how to check, how to protect yourself, and what to do if someone is already using your name.

Why identity protection matters

Large breaches leak millions of email addresses and passwords on a regular basis. Criminals take that data and try to log in to your accounts, or buy things in your name.

First step: check Find out for free whether your email address shows up in a known breach – Have I Been Pwned is the best-known service. If it does: change that password right away and turn on two-factor authentication .

The protections that do the most

  1. A unique password for every account, stored in a password manager , so one breach cannot open the rest.
  2. Two-factor authentication on the accounts that matter.
  3. Share less. Every detail you hand over is a detail that can leak later.
  4. Remove your personal data from people-search sites and data brokers.

When it has already happened

If someone is using your identity, speed and order matter more than anything else.

Your data is being misused? Do this now
  1. Change the password on every affected account – and anywhere you reused it.
  2. Turn on two-factor authentication wherever it is offered.
  3. Call your bank or card issuer and dispute any charge you do not recognize.
  4. Report it to the FTC at IdentityTheft.gov – you get a recovery plan and an official affidavit.
  5. Freeze your credit with Equifax, Experian and TransUnion. It is free.

What order to work in

Go from check to react to prevent. Find out whether you are affected, deal with what is already happening, then clean up what strangers can look up about you.

Check and watch for warning signs

Act when it is happening

Prevent and clean up

The foundation for all of it is a password manager and two-factor authentication – so a single breach does not open every door at once.

Prefer a clear order? New here? Work through the 15-minute security check and tick off the steps that matter most.

All articles

  • SIM swapping: when your phone number gets stolen

    Updated July 22, 2026

    No signal out of nowhere – and minutes later your accounts are gone. In a SIM swap, scammers move your number onto their own card and catch every code sent to …

  • Your email is in a data breach – what now?

    Updated July 3, 2026

    Your email address or password turned up in a data breach? Do not panic. This step-by-step plan gets you secure again in a few minutes.

  • Check for a data breach: am I affected?

    Updated February 23, 2026

    Billions of login details from old hacks are in circulation. Here is how to find out in a few minutes whether your email or passwords are in a breach – and what …

  • Remove your data from people-search sites

    Updated October 13, 2025

    Name, address, phone number – people-search sites collect and display a surprising amount about you. Here is how to find what is out there and get it taken …

  • Identity theft: what to do

    Updated September 23, 2025

    Someone is shopping, posting or opening accounts in your name? That is identity theft. This plan shows you, step by step, how to stop the damage and take your …