What to Do After a Data Breach

Most of us conduct a lot of business online: shopping, banking, work and more. That means that lots of our personal data is transmitted digitally — which also means that we can be vulnerable in the event of a data breach. In 2025, the FBI reported 859,532 complaints of suspected internet crime, with reported losses of more than $16 billion. That’s a 33% increase in losses since 2023. And the third highest cause for complaint was a data breach.

If you shop online, use social media or financial institutions, or have virtually any of your personal information online, you may become the victim of a data breach. Furthermore, just by entering your credit card details in the wrong form, swiping your card in the wrong place or not being able to identify a scam, you might be the victim of credit card fraud. 

Seeing fraud charges on your credit card statement can be frustrating, and knowing how to prevent data breaches can seem daunting. But there are ways to know if your identity has been compromised. If you stop receiving bills in the mail, if you are denied credit or if you spot weird charges on your banking statements, your information may have been swiped by someone else. 

If you think your personal information may have been breached or compromised, don’t panic. There are steps you can take to secure your data and regain control of your identity. Here’s what to do after a data breach. 

Identity theft protection can also provide peace of mind. Reach out to Farm Bureau to find out more.

Five Things to Do After a Data Breach

Step 1: Find Out What Data Was Compromised

Not all information carries equal weight, and some of your personal information is more sensitive than others. By figuring out what information was hacked, you will be able to target your cleanup efforts and respond to the breach more efficiently. Was the hacker able to get publicly available information like your name and address? Or did they capture much more sensitive information, like your credit card information or your Social Security number? Knowing what data (or combination of data) was stolen will give you an idea about where to focus your cleanup efforts.

If you were part of a data breach at a store or company, the business should reach out to you and let you know what information was exposed to hackers; they will sometimes provide information about steps to take to protect yourself. But you can also keep an eye on your credit report for tell-tale indicators, like accounts opened in your name that you don’t recognize and inquiries about your data that you didn’t make. If you see those, move immediately to freeze your credit.

Step 2: Change Passwords

This may sound like a simple step, but it’s crucial. Sometimes your personal information makes it easy for a hacker to guess your passwords or gain access to them through “challenge” questions. Change your passwords so that the hacker isn’t able to imitate you online, access your accounts or gain access to even more information.

Hackers are often looking to build a “profile” and imitate you, and the more information they are able to obtain, the easier it will be for them to assume your identity. The simplest way to avoid this is to change your passwords immediately (and make them hard to guess!).

Step 3: Change Account Numbers

If you think your credit card may have been compromised, contact your bank to cancel your card, which means the bank will re-issue your card and change the number. When speaking with your bank, ask them to be on the lookout for suspicious activity on your account — you will want to dispute any charges you didn’t make, so keep an eye on upcoming statements for at least the next three months after your information has been compromised. 

This is also a good reason to shop with credit cards online, rather than debit cards: It’s generally much easier to dispute and reverse fraudulent charges on a credit card.

Step 4: Add a Fraud Alert

In addition to having your bank or credit card company keep a watchful eye, contact the major credit reporting bureaus (Experian, Equifax and Transunion) to freeze your credit and initiate a fraud alert. It’s free and simple.

When you have a fraud alert associated with your Social Security number, no one will be able to open a new account with your name and information without the credit reporting bureaus first alerting you. The credit reporting bureau will want to verify that you initiated the new account and verify that you did, in fact, apply for the new card or line of credit.

Here’s some good news: When you alert one credit reporting bureau, they will contact the other two credit reporting bureaus on your behalf. You only need to make one phone call or register one fraud alert to be protected. 

Step 5: File Your Taxes Early

This may seem like a strange tip. But often when data breaches occur over the holidays, hackers have a broader plan in mind: filing taxes using your Social Security number before you do and intercepting your tax return. By filing your taxes early, you will avoid tax scams before they happen.

Keep in mind that the IRS does not initiate contact via email, text or social media. If the IRS is trying to contact you, they will always send you a letter and ask you to contact them. You will be able to look online and verify that the phone number they provided in the letter is legitimate and trustworthy. 

Never, ever speak to someone who calls you on the phone or via email who says they are from the IRS, and definitely do not give out your personal information.

Scammer Tips to Keep in Mind

Scams take many different forms, and scammers are always trying new tricks to see if they can learn more information about you. Be vigilant about protecting your information. 

If someone calls you and tells you they are from your bank or credit card company, or from a government agency or law enforcement, and then asks you for information, it’s imperative to question the person on the other end of the line. This could be a scammer trying to get even more information than they already have.

If you have any doubts that you are truly speaking to someone from your bank, simply hang up and call the phone number on the back of your card or one of the numbers provided on their website. True bank employees will appreciate your diligence when you take this step.

Protect Yourself, Always

Whether you shop online or in store, your information could be exposed in a data breach, and how you clean it up can be crucial. Did you know that Farm Bureau offers identity theft protection? We can help you understand this coverage and help you protect your sensitive information. Reach out to Farm Bureau today.