What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
First, identify what information the breach exposed. Change any exposed password immediately—and change it anywhere you reused a similar one. For exposed card details, contact the card issuer; for exposed Social Security or other identity information, check your credit and consider a fraud alert or freeze. In the United States, IdentityTheft.gov/databreach provides next steps based on the data involved.
Start by verifying the notice and identifying the exposed data
- Read the breach notice. Note which organization was affected, what information may have been exposed, and any steps or deadlines it gives.
- Verify unexpected messages independently. Do not click links in an unexpected email or text. Reach the organization through a website or phone number you already know is genuine.
- Get advice matched to the information. The FTC’s IdentityTheft.gov/databreach resource tailors guidance to the type of data involved. The right response differs for passwords, payment details, and identity information.
If a password was exposed, change it everywhere it was reused
Change the password on the affected service right away. Then change it on every other account where you used the same or a similar password. The FTC’s November 2024 guidance says to change a password immediately when a company reports it was lost in a breach: Creating Strong Passwords and Other Ways To Protect Your Accounts.
As an Amazon Associate I earn from qualifying purchases.
- Choose a strong, unique password for each account. A password manager can help generate and keep track of complex, unique passwords; it is optional and does not replace changing exposed credentials.
- If security-question answers were used as credentials and were exposed, change those answers where the service allows it.
- Turn on multi-factor authentication (MFA) wherever the service offers it. When available, an authenticator app or security key is more secure than a code sent by text or email, according to the FTC. Follow the service’s own setup and recovery instructions.
If you suspect someone has taken over an account
Signs can include unfamiliar account activity, profile changes, email forwarding rules you did not create, or messages or posts you did not send. If you can still sign in:
Recommended Free Tools
- Change the password to a new, unique one.
- Sign out of other devices or sessions if the service provides that option.
- Turn on two-factor authentication and check that the recovery email address and phone number belong to you.
- Review recent activity, forwarding rules, and account settings for changes you did not make.
If you are locked out, use the provider’s official account recovery process—not a link from an unsolicited message. The FTC’s Email or social media hacked? Here’s what to do guidance covers recovery and signs of account misuse.
#1 Best Overall
If payment-card information was exposed
Contact your bank or card issuer using the number on your card or another known-good channel. Ask whether you should replace the card or card number. Review transactions and promptly report charges or account changes you do not recognize. The FTC’s breach advice also recommends contacting the issuer when card information is involved: Breaches at Lord & Taylor, Saks, & MyFitnessPal.
If your Social Security number or other identity information was exposed
Use IdentityTheft.gov/databreach for steps tailored to the information in the notice. If your Social Security number was exposed, the FTC advises ordering free credit reports and checking for accounts you do not recognize.
- Consider a fraud alert or credit freeze. These can make it harder for someone to open new credit in your name. Choose based on your circumstances and follow the current instructions from the credit-reporting agencies.
- Act on signs of misuse. If you find unfamiliar accounts or other evidence that someone has used your identity, report it at IdentityTheft.gov and follow the personalized recovery plan.
- Evaluate any breach-offered service on its terms. An affected organization may offer credit monitoring or identity-theft insurance. Check what the offer covers and for how long; an offer does not by itself establish that a paid product is necessary.
The FTC’s Stolen identity? Get help at IdentityTheft.gov explains reporting and recovery options.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWatch for follow-up scams
After a breach, treat unsolicited calls, texts, or emails asking for passwords, payment, or other sensitive information with suspicion. Do not use the contact details or links in the message to verify the request. Contact the organization through a channel you already trust. For U.S. identity-theft reporting and recovery, use the official IdentityTheft.gov service; the FTC’s What To Know About Identity Theft guidance also warns about unsolicited requests for personal information.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do first, by information exposed
| What may have been exposed | First action | Next steps |
|---|---|---|
| Account password | Change it on the affected service and anywhere you reused a similar password. | Use unique passwords and enable MFA where available. |
| Payment-card data | Contact the card issuer or bank. | Ask about replacing the card number and report unfamiliar transactions. |
| Social Security or other identity information | Use IdentityTheft.gov/databreach for tailored steps. | Check credit reports; consider a fraud alert or freeze; report suspected identity theft. |
| Signs of account takeover | Secure the account if you can still sign in; otherwise start the provider’s official recovery process. | Check sessions, recovery details, forwarding rules, and account activity. |
This guidance is based on U.S. FTC resources. If you live elsewhere, use your country’s official identity-theft, privacy, and credit-reporting services.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
