What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
A data-breach notice means some information may have been exposed; it does not, by itself, prove that anyone accessed your account or stole money. First verify the notice through the organization’s official website, app, or a contact method you already trust. Then respond according to what was exposed: change affected passwords, check for account takeover, and contact your bank or take identity-protection steps if financial or identity data is involved.
1. Verify the breach notice safely
Do not click a link, open an attachment, or call a number in an unexpected breach message. Instead, open the organization’s official app or type its known website address yourself. You can also use a phone number or other contact method you already know is genuine. Ask whether the breach occurred, what information was involved, and what the organization recommends.
As an Amazon Associate I earn from qualifying purchases.
During a major incident, official phone lines may be busy; the UK National Cyber Security Centre (NCSC) says the organization’s website may be the easier first place to check. NCSC data breach guidance for individuals and families
2. Change exposed passwords and secure access
If the exposed information includes a password you still use, change it promptly. Make the replacement unique to that account, and change it anywhere else you reused the old password. Attackers may try a known username and password on other services. Use a passkey if the service offers one, or a strong unique password; a password manager can help you maintain separate credentials.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you think someone may have accessed the account, use its official security settings to sign out other sessions and connected apps, then turn on two-step verification. Review recovery email addresses and phone numbers to make sure they are yours. Email deserves particular attention because someone who controls it may be able to request password-reset links for other accounts. The FTC’s account recovery guidance also recommends checking for unfamiliar activity and settings.
3. Check whether the account was taken over
A notice that information was exposed is not confirmation of a login or takeover. Look for signs that someone has used the account or changed its controls:
Rank #2
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
- Logins or login attempts, devices, or connected apps you do not recognize.
- Changed passwords, security settings, recovery contacts, or email-forwarding rules.
- Messages you did not send, purchases you did not make, or other unfamiliar activity.
If you are locked out, follow the provider’s recovery instructions from its official site or app—not a recovery link in an unsolicited message. If you regain access, review active sessions, recovery details, and connected apps before treating the account as secure. The NCSC offers guidance for hacked accounts.
Recommended Free Tools
4. Match your response to the information exposed
If a Social Security number was exposed
For people in the United States, the Federal Trade Commission (FTC) directs consumers to IdentityTheft.gov for steps tailored to their circumstances. Order free credit reports and check for accounts you do not recognize. A credit freeze or fraud alert can make it harder for someone to open new accounts in your name; consider whether either option fits your situation. The FTC explains these steps in What To Do After a Data Breach.
If bank, card, or payment details were exposed or misused
Contact your bank, card issuer, or payment provider promptly using its official app or website, or the number printed on your card. Ask whether to block or replace compromised credentials and how to dispute unauthorized transactions. Options for recovering money depend on the payment type and institution; the FTC’s guidance for people who were scammed includes steps for contacting financial institutions.
If other personal information was exposed
Follow the organization’s verified notice and relevant official guidance for your country. A credit freeze is not automatically necessary for every kind of breach, and you do not have to buy a service offered by the breached organization just because it appears in the notice.
Rank #4
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
5. Watch for follow-up scams
Scammers may use a real breach as context for fake password-reset, compensation, device-scan, or delivery messages. Such messages can arrive after the breach becomes public. Do not share a password or verification code with someone who contacts you unexpectedly, and do not act through an unsolicited link. Contact the organization independently to check whether a message is genuine. The NCSC’s breach guidance describes these follow-on tactics.
If you lose money, contact your bank promptly and report the incident to the appropriate authority where you live. In the UK, readers can use Report Fraud; Scotland has separate reporting guidance.
6. Choose stronger two-step verification for the future
After the urgent response, check which verification methods the service supports and how you would recover access if you lost a device or key.
| Method | Compatibility and setup | Credential-theft resistance | Recovery planning |
|---|---|---|---|
| Security key | Requires a service that supports the key; it is a physical second factor. | The FTC calls security keys the strongest two-factor method because they do not use credentials hackers can steal. FTC guidance on two-factor authentication | Check the service’s recovery options and plan for a lost or unavailable key. |
| Authenticator app or one-time code | May be easier to set up or more widely available, depending on the service. | Adds a verification step, but the method and its protection depend on the service’s implementation. | Check how to regain access if you lose the device or cannot receive a code. |
Neither option replaces changing an exposed password or responding to suspected account access. You do not need to buy a hardware key to secure an account using the steps above.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
