What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If a school or education vendor says your child’s information was exposed, first verify the message through a contact method you already trust. Read the official notice to identify the data involved and any free services offered, then follow the Federal Trade Commission’s breach guidance. A child credit-file search and, when appropriate, a free minor credit freeze can reduce the risk of new-account fraud, but a freeze does not protect existing accounts.
Exposure is not proof that identity theft has occurred. Monitor for the warning signs below and report the incident to the FTC only when you find actual misuse or need its recovery plan.
As an Amazon Associate I earn from qualifying purchases.
My child’s school was hacked. What should I do first?
Work through these steps in order. They separate a genuine school notice from a scam, establish exactly what happened, and match the response to the information involved.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match- Verify the announcement independently. A breach can trigger follow-up phishing messages that imitate a school, district, or education vendor. Do not click a link, open an attachment, or call a telephone number supplied in an unexpected email, text, or letter. Use a website, email address, or phone number you already know belongs to the school or vendor. The FTC gives the same warning in its guidance on messages sent after the 2026 Canvas cyberattack: What to know after the Canvas cyberattack.
- Obtain the actual breach notice. Ask the verified organization for the written notice, not a summary copied into a social-media post. Keep the notice, envelope, and any later updates in a secure folder. The notice should identify the organization, the incident or notification date, the affected population, the categories of information involved, and the response services available. Those details are specific to your incident and cannot be inferred from the fact that a school was breached.
- Find out what was exposed about your child. Look for an explicit list of data elements, such as a Social Security number or other identifying information, rather than assuming every student record contained the same fields. Ask the school or vendor whether the data was encrypted, whether the exposure has been contained, and whether a separate notice will follow if the investigation changes the scope. Request the name and contact channel for the organization’s privacy or incident-response team.
- Record deadlines and offer terms. Write down enrollment deadlines for any free credit monitoring or identity-theft service, the period of service, what information it covers, and how to cancel. Do not enroll through a link in a suspicious message; navigate from the verified organization’s known website or call its known number instead.
- Secure your records. Save copies of the notice, your communications, confirmation numbers, and dates. Use a private, access-controlled location. Do not email a child’s Social Security card or birth certificate unless the organization’s verified process specifically requires it and explains how the documents will be protected.
Exposure is different from identity theft
A breach notice means information may have been accessed, copied, or disclosed. It does not establish that someone has opened an account, filed a tax return, claimed a benefit, or otherwise used the child’s identity. The FTC’s What To Do After a Data Breach guidance treats exposure as a reason to take protective steps, not as automatic proof of fraud.
#1 Best Overall
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
What to do when there is no sign of misuse
Follow the notice, use the FTC’s tailored checklist at IdentityTheft.gov/databreach guidance, and consider a child credit-file search or freeze when the exposed information makes that sensible. Continue watching existing financial and insurance accounts. If you have no evidence that anyone misused the child’s information, the FTC says you do not yet need to file an identity-theft report merely because the school reported exposure.
When the situation becomes identity theft
Move to the recovery process when you find a fraudulent account, bill, benefit claim, tax notice, loan denial, or another transaction tied to the child. At that point, contact the affected company and credit bureaus, and report the identity theft at IdentityTheft.gov so the FTC can provide a recovery plan. The detailed sequence appears later in this guide.
Read the notice for the facts that determine your response
Parents often want to know how many students were affected, when an attacker entered the system, or whether a particular type of record was taken. A general article cannot answer those questions for every district or vendor. Use the notice and the organization’s verified incident team for the following facts:
- Which child records are in scope: Confirm that your child is listed and whether the exposure involved one system, multiple systems, paper files, or a service provider.
- Which data elements are involved: The response is more targeted when you know whether a Social Security number, date of birth, address, account credential, health information, or another field was included. Do not assume that a field was exposed unless the notice says so.
- Relevant dates: Note the incident period, discovery date, notification date, and any deadline for enrolling in offered services.
- Containment and follow-up: Ask whether the organization reset credentials, notified other agencies, or expects to send an amended notice.
- Services and limitations: Determine whether the organization offers credit monitoring, identity-theft insurance, a call center, or another service, and read what the service excludes and how long it lasts.
Keep the organization’s verified contact details with your records. If a later message asks for information that the original notice did not request, verify it again through that channel.
Use the FTC’s breach-response path
The FTC directs people affected by a data breach to What To Do After a Data Breach and its IdentityTheft.gov/databreach resource. That guidance helps you decide whether a credit freeze, fraud alert, account password change, or another action fits the information exposed. It also explains how to evaluate free post-breach services.
Rank #2
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Evaluate free monitoring or insurance before enrolling
A school or vendor may offer free credit monitoring or identity-theft insurance. Treat the offer as one option, not as proof that the provider knows misuse occurred. Check:
- Whether the service monitors a child, a parent, or both.
- Which credit bureaus, databases, account types, or identity events it checks.
- When coverage begins and ends, and whether enrollment must occur by a stated date.
- What assistance is available if fraud is found and whether a deductible or exclusion applies.
- How the provider handles the child’s documents and whether the service creates an account that must later be closed.
Do not pay for a service simply because a breach occurred. The FTC’s guidance identifies free steps, including a child credit freeze, that may be appropriate. Decide based on the notice, the data involved, and your family’s circumstances.
Free tools Windows power users keep installed
One-click scans. No signup required.
Search for a child’s credit file
Most people under 18 do not have a credit report, but a child can have a file if someone has already used the child’s Social Security number or if a creditor created a record. The FTC’s child-identity-theft guidance, updated in October 2024, says a parent can ask Equifax, Experian, and TransUnion to perform a manual search for the child’s Social Security number: How To Protect Your Child From Identity Theft.
Gather documents before contacting the bureaus
Each bureau has its own current procedure. Be prepared for requests for:
- Your government-issued identification.
- Proof of your address.
- The child’s birth certificate.
- The child’s Social Security card.
- Proof of guardianship or another document showing your authority, when relevant.
Send only what the bureau’s verified instructions require. Use the bureau’s current submission method and retain delivery receipts, copies, and confirmation numbers. Procedures can change, so do not rely on an old form or an unverified website.
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
Interpret the result
A bureau may report that it found no file, or it may identify a file that needs protection. A no-file result is not evidence that the breach was harmless; it simply means that bureau did not locate a credit record in the search. Compare the responses from all three bureaus because a record can exist with one and not the others.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesShould I freeze my child’s credit after a data breach?
A freeze is a proportionate option when you want to make it harder for a new creditor to access a child’s credit file. It is free, but the minor procedure is different from an adult freeze and must be handled with each bureau separately.
Age determines who can request the freeze
| Child’s age | Who requests or removes the freeze | What to know |
|---|---|---|
| Under 16 | A parent or guardian requests the freeze. | The bureau may create a record solely to freeze and protect it when no file exists. The process and documents differ by bureau. |
| 16 or 17 | The teenager may request and remove the freeze themselves. | Contact each bureau for its current instructions and identity-verification requirements. |
| 18 and older | The young adult manages the file under the bureau’s adult process. | The child-specific parent procedure no longer applies; check the bureau’s current adult-freeze instructions. |
The Federal Trade Commission describes the under-16 process and the ability to create a protected record in New protections available for minors under 16. Contact Equifax, Experian, and TransUnion individually; a request to one bureau does not automatically freeze the other two.
Request a minor freeze step by step
- Confirm the child’s age and your authority to act.
- Open the current child-freeze instructions for each of the three bureaus from a trusted source.
- Prepare the identity and relationship documents the bureau lists.
- Submit the request using that bureau’s prescribed online, mail, or other channel.
- Save the confirmation and any personal identification number or account credentials the bureau provides.
- Repeat the process with the other two bureaus and verify that each has acknowledged the freeze.
A freeze restricts access to the credit file for new-account decisions. It does not erase information, investigate the breach, or repair an account that is already fraudulent.
Credit freeze versus fraud alert
Both tools address new-credit risk, but they work differently. The FTC’s breach and credit guidance explains the distinction; the right choice depends on the notice, whether a file exists, and the bureau’s current minor procedures.
Rank #4
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
| Feature | Credit freeze | Fraud alert |
|---|---|---|
| Primary effect | Restricts access to the credit file for new-account applications. | Asks lenders to take steps to verify identity before extending credit. |
| Cost | Free. | The FTC’s breach guidance explains the alert option; check current bureau instructions for eligibility and handling. |
| Child procedure | Special process for a parent or guardian of a child under 16; 16- and 17-year-olds may request and remove their own freeze. | Follow the bureau’s current instructions and confirm that the alert procedure applies to the child’s situation. |
| Coverage | Helps with new-account fraud tied to a credit file. | Verification requests can warn lenders, but an alert is not a block on every application. |
| What neither tool does | Neither one stops misuse of existing bank, payment, medical, insurance, government-benefit, school, or other accounts. Continue monitoring those accounts. | |
Do not assume that choosing one tool eliminates the need to read the notice or watch for warning signs. If a bureau tells you that no file exists, ask how its current process handles a minor freeze; the FTC says a bureau may create a file for the limited purpose of protecting it.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Monitor for signs that someone is using the child’s identity
The FTC lists several child-specific warning signs in How To Protect Your Child From Identity Theft:
- An unfamiliar overdue bill arrives in the child’s name.
- The child is denied a government benefit because someone is already using the child’s Social Security number.
- The IRS sends a letter about unpaid income taxes for the child.
- The child is denied a student loan because of bad credit.
Other unexpected correspondence deserves verification, but do not label it identity theft until you confirm what happened with the company or agency involved. Keep the envelope, notice, account number, and date received; these details help when disputing the record.
Keep watching existing accounts
A credit freeze is aimed at new-credit access. It does not protect an existing bank account, payment account, insurance policy, medical account, or another service that already holds the child’s information. Review statements and account notices for unauthorized activity, and use the organization’s established fraud channel if something does not belong to your family. The FTC explains this limitation in Understanding Your Credit.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →If you find fraud, follow a recovery sequence
Once you have evidence of misuse, act methodically and keep a log. The FTC’s child identity-theft guidance recommends these steps:
Best Value
- Enhanced Efficiency and Security: Effectively shreds 14 sheets of paper per pass into 5 /32” x 1-9/16” cross-cut particles (Security Level P-4), providing greater security for confidential documents
- Powerful Deskside Shredding: Successfully shreds credit cards, paper clips, staples and unopened junk mail in addition to paper
- Quiet Operation: Minimized noise to prevent distraction in shared workplaces or at home
- Safety Lock for Added Protection: Comes equipped with patented Safety Lock, disabling the machine as needed to protect you, your family or your pets
- Convenient Pull Out Bin to Eliminate Mess: 5-gallon pull out bin neatly contains over 250 shredded sheets
- Contact every affected company’s fraud department. Use a phone number or website you verify independently, not a contact detail from a suspicious message. Explain that the account was opened or used through child identity theft.
- Ask the company to close the fraudulent account. Request written confirmation that it has been closed and that the child is not responsible for the balance. Ask what documents it requires to investigate and where to send them securely.
- Contact all three credit bureaus. Tell each bureau which fraudulent account or inquiry belongs to the child and request removal of the fraudulent information. Provide only the documentation requested through the bureau’s current process, and keep proof of submission.
- Report the identity theft to the FTC. Use IdentityTheft.gov to report the child identity theft and provide as much detail as you can. The FTC uses the report to give you a recovery plan and explain next actions.
- Track unresolved items. Record the company, representative, date, reference number, documents sent, and promised response. Follow up through the company’s documented dispute channel if the account remains open or the child is still shown as liable.
A breach report alone does not require this fraud-recovery sequence. Start it when you can identify actual misuse or when a company, bureau, or agency confirms a fraudulent record.
Protect information that was not exposed
These measures cannot undo a school breach, but they reduce opportunities for later misuse and help you recognize a problem:
- Store the child’s Social Security card, birth certificate, and school records securely; do not carry originals unnecessarily.
- Ask the school whether parent portals, learning platforms, or other accounts require a password reset. Use a unique password for each service and enable multifactor authentication when the service supports it.
- Teach the child not to share identifying details in games, social networks, surveys, or messages without checking with a trusted adult.
- Shred paper documents containing the child’s personal information before disposal, as the FTC recommends.
- Review school forms and vendor privacy notices before providing new information. Ask why a field is needed, how long it will be retained, and who receives it.
- Keep a current list of organizations that hold the child’s financial, medical, educational, and insurance information so an unexpected notice can be checked quickly.
Common decisions after a school breach
“What if my child’s Social Security number was exposed at school?”
Verify the notice, confirm that the Social Security number was specifically included, request a manual search from Equifax, Experian, and TransUnion, and consider the age-appropriate free child freeze. A parent or guardian handles a freeze for a child under 16; a 16- or 17-year-old can request and remove their own. Continue monitoring for misuse because a freeze addresses new-credit access, not existing accounts.
“Do I need to report a breach if nobody has used my child’s information?”
You do not need to file an FTC identity-theft report solely because information was exposed and there is no sign of misuse. Follow the organization’s notice, use the FTC breach checklist, and report promptly if a fraudulent account, bill, benefit claim, tax notice, or other misuse appears.
“How can I tell if someone is using my child’s identity?”
Look for the FTC’s listed signals: an unfamiliar overdue bill, denial of a government benefit because the Social Security number is already in use, an IRS letter about unpaid taxes, or a student-loan denial based on bad credit. Verify each signal with the named company or agency and preserve the records before disputing it.
Important limits and U.S. scope
This guidance is for families in the United States and is general information, not incident-specific legal or financial advice. The school or vendor’s verified notice controls the facts about what was exposed, when it happened, and which services are offered. Credit-bureau forms, document requirements, and contact methods can change, so use the FTC’s current child identity-theft guidance and each bureau’s current instructions rather than an old checklist.
If the incident involves a child who lives outside the United States, or a school that is subject to another country’s privacy and credit-reporting rules, consult the relevant national authority instead of assuming the U.S. freeze process applies.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
