Data Breach Response Checklist

First 24 hours

Confirm the notice source.
Use the company’s official website or app, not links in unexpected emails or texts.Change the affected password.
Use a unique password and update reused passwords anywhere else.Enable multi-factor authentication.
Prefer authenticator apps or security keys over SMS when available.Review active sessions and recovery settings.
Sign out unknown devices and remove unfamiliar email addresses or phone numbers.

Next 7 days

Classify exposed data.
Email-only is lower risk; SSN, payment, health, and identity documents are high risk.Set bank and card alerts.
Turn on transaction notifications and dispute unfamiliar charges quickly.Freeze credit if identifiers leaked.
Place freezes at the major bureaus if SSN or credit-opening data was exposed.Document everything.
Save notices, screenshots, dates, ticket numbers, and phone-call notes.

Ongoing monitoring

Watch for phishing.
Expect scam messages impersonating the breached company or “support”.Check credit reports.
Look for unfamiliar accounts, inquiries, addresses, or employer details.Consider recovery support.
Compare identity theft protection if sensitive identity data was exposed.Update household guidance.
Tell family members what happened if shared accounts or child data may be affected.

What to compare next

Data breach FAQ

What should I do first after a data breach notice?

Change the password for the affected account, enable multi-factor authentication, watch for account takeover attempts, and check whether sensitive identifiers such as SSNs or payment data were exposed.

Do I need identity theft protection after every breach?

Not always. If only an email address was exposed, monitoring may be enough. If SSN, driver license, financial, medical, or login data was exposed, stronger monitoring and recovery support may be worth comparing.

Should I freeze my credit?

If your SSN or other credit-opening identifiers were exposed, a credit freeze at the major bureaus is one of the strongest free protections against new-account fraud.

Does this checklist store personal data?

The checklist stores only checkbox progress locally in your browser if supported. Do not enter sensitive data on this page.

Data Breach Response Checklist

Your progress

First 24 hours

Next 7 days

Ongoing monitoring

What to compare next

Identity theft protection comparison

Full breach guide

Password managers

Aura review

Data breach FAQ