Loading Cyber Conduct…
Please wait while the page loads.
What to do when your email address or other information appears in a reported data breach.
Short answer
Find out what information was exposed. If a password was included or reused elsewhere, change it immediately. Be especially cautious of phishing messages using details from the breach.
A data breach can expose different types of information. An exposed email address is different from an exposed password or financial credential.
If a password was exposed or reused on other accounts, change it everywhere it was reused.
Enable multi-factor authentication on important accounts.
Expect more convincing phishing attempts if attackers have additional information about you.
Check it now
A practical check for what to do when personal information has been exposed online.
Open the checkSomething already happened?
If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
If you see activity you don't recognise, secure the affected account directly, change the password, enable MFA, review recent activity and linked devices, and contact the provider if necessary.
Keep exploring