General legal information for the United States, not legal advice. Read the disclaimer
Law Pebble

Data Breach Notice: What to Do If Your Information Was Exposed

How is this guide written?This guide was drafted with AI writing tools and edited for plain English. We are confirming each hard figure and deadline against official sources, and a guide gets the "Fact checked" label only when that is done. Where a rule varies by state we say so instead of guessing. It is general information, not legal advice.How we verifyBy Law Pebble Editorial TeamReviewed 2026-10-192 min read
Photo: Kelly Sikkema / Unsplash

Data breaches expose personal information such as names, Social Security numbers and account details. Quick steps can reduce the chance of fraud.

Immediate steps

  1. Read the notice to see what was exposed.
  2. Change passwords for affected accounts and use unique passwords with multi-factor authentication.
  3. Place a credit freeze with the three credit bureaus.
  4. Monitor bank and card statements and set up alerts.
  5. Review your credit reports at AnnualCreditReport.com.

If Social Security numbers were exposed

  • Consider a longer-term freeze and an IRS Identity Protection PIN.
  • Watch for tax-related fraud.
  • Be alert to phishing emails and calls that use your information.

Credit monitoring offers

Companies often offer free monitoring after a breach. It can be useful, but it does not prevent identity theft. Read the terms and avoid giving more data than needed.

Many states require companies to notify affected people, and some give a right to sue. Class action settlements may follow breaches. Keep the notice and records of any losses. See our guides to identity theft and class actions.

Frequently asked questions

Should I accept the free monitoring?

It can help, but a freeze offers stronger protection.

Can I sue the company?

Sometimes, depending on the facts and state law.

Keep reading