What to Do After a Data Breach (2026)
Confirm what was exposed, then change the breached password and any reuse of it and turn on MFA1. If an SSN, date of birth, government ID, or financial account was named, place a free credit freeze (and consider a fraud alert) at Equifax, Experian, and TransUnion; check AnnualCreditReport.com for unfamiliar accounts2. Keep the notice; report misuse at IdentityTheft.gov; ignore “dark web removal” pitches.
Sources
Frequently asked questions
How is this different from the first 48 hours?
First-48 is immediate triage: verify the notice, rotate credentials, freeze when IDs or financial data are named. This guide is the follow-through: credit checks, documentation, reporting if misuse starts, and longer-term hygiene. See the first 48 hours after a data breach and a company emailed me about a breach.
Should I freeze my credit for every breach?
No. Freeze when identifiers that enable new-account fraud were exposed, typically a Social Security number, date of birth, or government ID. For password-only incidents, rotate passwords and turn on MFA first.
Can someone erase my data from the dark web?
Generally no. Treat “dark web removal” paid promises as a red flag. Focus on credential rotation, freezes, and reducing open-web findability on people-search sites.
What does Delist do here?
Delist does not remove dump copies or scrub the breached company’s systems. A free scan checks people-search sites, public records, data brokers, and breach-source signals (signals are not listings). Paid help is authorized open-web removal where the product supports it, not IdentityTheft.gov and not police reporting.
When should I report?
If data is misused, start at IdentityTheft.gov. If money moved or an account was taken over, also use the company’s fraud line and consider FBI IC3. Immediate danger: 911.
See what’s listed about you on the open web we check, free.
See what’s listed, free →This guide provides general information for informational purposes only and is not a substitute for professional legal, medical, or safety advice. If you are in danger, contact emergency services immediately.