Free tools Windows power users keep installed
One-click scans. No signup required.
Start with the breach notice: identify exactly what information was involved, when the incident occurred (if the notice gives a date), and what the organization tells you to do. Then secure any affected accounts, review transactions and credit reports, and choose a credit freeze or fraud alert if credit information or your Social Security number was exposed. Exposure alone does not prove that someone has used your identity; confirmed misuse calls for a different reporting and dispute process.
For U.S. residents, the Federal Trade Commission’s free recovery process at IdentityTheft.gov is the central resource when identity theft has actually occurred. You do not need to buy a monitoring subscription to take the essential protective steps.
As an Amazon Associate I earn from qualifying purchases.
What a data exposure means—and what it does not prove
A breach, lost file, or other exposure means information may have been accessible to someone who should not have had it. It does not, by itself, show that a criminal opened an account, took money, filed a tax return, or used your identity. Your first task is to match the response to the information involved and to any evidence of misuse.
Read the notice and any official instructions linked from it. Look for:
#1 Best Overall
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
- The categories of information involved, such as an email address, password, account number, payment-card data, Social Security number, medical information, or government-benefit details.
- The date or period of the incident and when the organization discovered it, if those dates are stated.
- Whether the organization says it reset credentials, replaced cards, offers a service, or expects you to take a particular action.
- A phone number or web address for questions. If the notice is unclear, use contact details you already know belong to the organization rather than relying on an unexpected link or caller.
There is no single response deadline or universal list of data elements for every incident. The type of information and the facts in your notice determine which steps matter most.
Warning signs that exposure has become identity theft
The FTC identifies suspicious account activity, unexpected bills, unfamiliar entries on a credit report, collection calls for debts you do not owe, and unexpected medical or tax notices as possible signs. Also take seriously unexplained withdrawals, unfamiliar card charges, missing bills, or accounts you did not open. One sign does not establish how the information was obtained, but it is a reason to investigate promptly.
What to do first: a practical sequence
1. Preserve the notice and make a fact sheet
Save the letter or email as a PDF and keep the organization’s incident page, reference number, and contact information. Write down what data was named, the dates provided, and every action you take. This record prevents you from having to reconstruct events later when a bank, bureau, agency, or police department asks for details.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 112. Secure money and affected accounts
If a bank, card issuer, phone company, utility, online service, or other account may be involved, contact its fraud department. Ask whether the account should be locked, closed, reissued, or otherwise secured. Use a phone number from a statement, the back of a card, or the organization’s known official website—not a number supplied in an unsolicited message.
Change the password, PIN, or other login secret for the affected account. If you reused that password anywhere else, change it on every reused account. Use a strong, unique password for each service and enable multifactor authentication wherever it is offered. The FTC’s September 2024 consumer advice explains: “Multi-factor authentication makes it harder for scammers to log in to your accounts if they do get your username and password.”
Rank #2
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Review recent statements and transaction histories. Report charges, withdrawals, transfers, new payees, password changes, or profile changes you do not recognize. Ask the provider what documentation it needs and when replacement cards, account numbers, or devices will be issued.
3. Watch for follow-up scams
After a publicized breach, criminals may pose as the affected company, a bank, a government agency, or a credit bureau. Do not disclose a one-time code, full password, PIN, or remote-access permission to an unsolicited caller. Navigate to an official site yourself or call a number you already trust.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Credit freeze or fraud alert? Choose based on your risk
Both tools are free, but they work differently. A freeze restricts access to your credit report; a fraud alert tells businesses to take extra steps to verify a credit applicant. The right choice depends on whether you need new credit soon and whether the exposure included credit-report information or your Social Security number.
| Tool | What it does | Where to request it | How long it lasts | When it is useful |
|---|---|---|---|---|
| Security freeze | Restricts prospective creditors’ access to your credit report, making it harder to open many new credit accounts in your name. | Request separately from Equifax, Experian, and TransUnion. | Until you lift it temporarily or remove it. | When you want the strongest barrier against new-account fraud and do not need unrestricted credit applications immediately. |
| Initial fraud alert | Requires a business that sees the alert to take reasonable steps to verify the identity of someone applying for credit. | Contact any one of the three nationwide bureaus; that bureau must notify the other two. | One year. | When you want an added verification step without separately contacting all three bureaus. |
| Extended fraud alert | Provides a longer alert for identity-theft victims. | Follow the bureau’s current submission instructions and provide the required FTC Identity Theft Report. | Seven years. | After confirmed identity theft, when you can document the theft through the FTC process. |
How to place a freeze
- Open the security-freeze section for Equifax, Experian, and TransUnion using each bureau’s current official website or contact method.
- Submit the requested identity information and create or record the credentials used to manage the freeze.
- Save each confirmation and any PIN or password. You may need it to lift the freeze temporarily.
- When applying for credit or another service that checks a credit file, lift the freeze temporarily for the bureau the business uses, then reinstate it afterward if desired.
A freeze does not stop every form of fraud. It does not secure an already compromised bank account, prevent takeover of an email account, or block tax-refund, medical, or government-benefit misuse. Handle those risks separately.
How to place an initial fraud alert
Contact one nationwide bureau and request an initial fraud alert. The bureau you contact must notify the other two, so you do not have to submit three separate requests for the initial alert. The alert lasts one year. If a business sees it, the business must take reasonable steps to verify the applicant’s identity, but an alert is not an absolute guarantee that a fraudulent application will be rejected.
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
When an extended alert is available
If someone has used your information, the FTC Identity Theft Report can support an extended fraud alert lasting seven years. Follow the bureau’s current instructions for submitting the report and any other documents it requests. An extended alert is for documented identity-theft victims, not merely everyone who received a breach notice.
Recommended Free Tools
Check your credit reports and dispute what is wrong
Use AnnualCreditReport.com, the official source identified by the FTC, to obtain your credit reports. The FTC’s current recovery guidance says reports can be checked weekly for free. Look for unfamiliar accounts, inquiries, balances, collection items, addresses, or other activity.
- Download or print each report and mark every item you do not recognize.
- Contact the business associated with a fraudulent account or charge and ask what it needs to investigate and close or correct the item.
- Dispute inaccurate or fraudulent information with the credit bureau that reported it and with the business that supplied it. Follow each organization’s submission instructions and keep copies.
- Check later reports to confirm that corrections or blocks appear.
A credit report is only one source of evidence. Continue reviewing bank, card, phone, utility, medical, and online-account activity even when the reports look normal.
Report confirmed identity theft at IdentityTheft.gov
If someone has actually used your information, report it through IdentityTheft.gov. The FTC’s guided process creates an Identity Theft Report and a tailored recovery plan. Save or print both.
The report can help you ask a credit bureau to block information that resulted from identity theft. The FTC’s rights guidance describes the supporting documents and the process. For each fraudulent account or transaction, contact the business involved, dispute the item, and use the FTC’s sample letters when appropriate.
Rank #4
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Keep a complete paper trail
- Record the date, department, representative’s name, phone number, and case number for every call.
- Keep copies of letters, forms, reports, account statements, and screenshots.
- Send disputes using the method and address the business or bureau specifies; retain delivery confirmation when practical.
- Store the FTC report and recovery plan where you can retrieve them without exposing them publicly.
If you need a police report, the FTC recovery guidance says to bring your FTC Identity Theft Report, photo identification, proof of address, and other supporting evidence. Whether a department takes a report can depend on local procedures and the facts of the case.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Match the response to the data that was exposed
Email address, username, or password
Change the exposed password immediately and anywhere it was reused. Turn on multifactor authentication, review active sessions and recovery addresses, and remove unfamiliar devices or forwarding rules. If the exposed account controls password resets for other services, secure it first and then work through those connected accounts.
Payment-card or bank information
Call the issuer or financial institution’s fraud department. Ask whether to cancel and replace the card, close an account, change a PIN, or add transaction controls. Review statements and report unauthorized activity promptly under the provider’s instructions.
Social Security number or other credit-file data
Consider a security freeze at all three bureaus or an initial fraud alert through one bureau. Obtain your reports through AnnualCreditReport.com and look for unfamiliar accounts and inquiries. If misuse is confirmed, complete the FTC IdentityTheft.gov process and consider an extended fraud alert.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Medical information
Check medical records, bills, explanation-of-benefits statements, and patient portals for care or claims you did not receive. Contact the provider or health plan named on the record and ask how to correct the file and investigate the claim. Medical identity theft may not appear on a credit report.
Best Value
- Enhanced Efficiency and Security: Effectively shreds 14 sheets of paper per pass into 5 /32” x 1-9/16” cross-cut particles (Security Level P-4), providing greater security for confidential documents
- Powerful Deskside Shredding: Successfully shreds credit cards, paper clips, staples and unopened junk mail in addition to paper
- Quiet Operation: Minimized noise to prevent distraction in shared workplaces or at home
- Safety Lock for Added Protection: Comes equipped with patented Safety Lock, disabling the machine as needed to protect you, your family or your pets
- Convenient Pull Out Bin to Eliminate Mess: 5-gallon pull out bin neatly contains over 250 shredded sheets
Tax information
If the IRS sends a notice saying someone used your Social Security number for a tax refund, follow the notice and the tax-specific instructions in the IdentityTheft.gov recovery process. File your legitimate return as early as you can and respond promptly to IRS letters. A credit freeze or credit-monitoring alert does not substitute for the IRS procedure.
Child’s information
Contact the business where the account or debt appeared and explain that the person is a minor. Use IdentityTheft.gov and follow each bureau’s current procedure for checking whether a child has a credit file or placing a freeze. Keep proof of the child’s identity and your relationship available because the bureau may request it.
Government benefits or employment information
Contact the agency that administers the benefit or the relevant employer-verification channel. Follow that program’s identity-theft instructions, which may involve forms, replacement documents, or proof of employment. A credit freeze alone does not resolve benefits or employment misuse.
What credit and identity monitoring can—and cannot—do
Monitoring is optional. It is not the same as a freeze, an FTC report, or a dispute, and you can complete the core recovery steps without paying for a service.
| Offering | Typical signal or help | Important limitation or question |
|---|---|---|
| Credit monitoring | Changes on one or more credit files, such as new accounts or inquiries. | Ask which bureaus are included, how often reports are available, and whether a full report costs extra. |
| Identity monitoring | Signals in other databases or records beyond a credit file. | Coverage varies; ask exactly which data sources are checked and how alerts are delivered. |
| Identity-recovery assistance | Help with correspondence, disputes, or a case manager. | Ask what work is included, whether the service can act for you only with formal authority, and when assistance ends. |
| Identity-theft insurance | May reimburse certain recovery expenses, lost wages, or legal fees. | It generally does not reimburse money stolen by a scammer. Check exclusions, deductible, limits, and overlap with homeowners or renters insurance. |
The FTC warns that monitoring services may not alert you to tax-refund fraud or government-benefit fraud. Before paying, check whether your bank, credit union, card provider, employer, or insurer already includes a relevant service. Compare the total recurring cost with the actual bureaus, databases, assistance, and insurance terms offered.
Ongoing protection after the immediate response
- Review financial statements, account notifications, and credit reports on a regular schedule.
- Keep multifactor authentication enabled and do not reuse passwords.
- Update recovery email addresses and phone numbers, and remove devices you no longer control.
- Shred sensitive paper records before disposal. A cross-cut shredder can help with documents, but it does not replace account security or credit protections after an electronic exposure.
- Be cautious with urgent calls, texts, and emails that use the breach as a pretext to request codes, payment, or remote access.
Keep your incident records until the accounts, reports, and disputes are settled and you no longer need them for an agency, provider, or insurer. Contact details and commercial service terms can change, so verify current instructions on the official agency, bureau, or provider website when you act.
When to escalate
Escalate quickly when money is leaving an account, a new account is being opened, a tax or benefits notice names activity you did not perform, medical records contain someone else’s care, or a collector is pursuing a debt that is not yours. Contact the affected business or agency, complete the FTC report when identity theft occurred, and provide the documentation each organization requests. If you face immediate financial danger or account takeover, use the institution’s fraud department rather than waiting for a monitoring alert.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
