A leaked phone number, email address, name, address, ID information, or other personal detail does not automatically mean that an account has been hacked. The response depends on exactly what was exposed.
Write down what information was exposed and where it appeared. Preserve evidence before content disappears.
If passwords or authentication information were exposed, change the affected passwords immediately and enable multi-factor authentication.
If sensitive identity or financial information was exposed, monitor relevant accounts for suspicious activity and contact the affected organisation through official channels where appropriate.
Remove unnecessary personal information from public profiles and review privacy settings on services you use.
Be particularly cautious of follow-up messages that use the leaked information to appear legitimate. A scammer may know your name, phone number, workplace, or other details.
Use the exposed-information checklist to work through what needs attention instead of trying to fix everything at once.