How to react to a data leak

The feeling of helplessness when you find out your data has leaked is, unfortunately, very real for a lot of people. Data breaches happen everywhere — banks, social networks, online stores, government institutions. If this happens to you personally or in your company, take the steps in this article. They should help you save what can still be saved.

Change your passwords

The first thing you MUST do if your account gets compromised is change the password. If you used the password somewhere else too and it got stolen, you have to change it there as well. Which leads to: you should have a unique strong password everywhere! (If you want more on passwords, read about them HERE.)

Turn on MFA

Multi-factor authentication is another layer protecting you against full account takeover. It isn't 100%, so you still need a strong, unique password — but it can stop a large share of attacks that would otherwise get through. There are several methods; the safest are passkeys, but using SMS or authenticator apps is fine too.

Freeze your cards

If your payment cards leaked, or you suspect their details did, freeze them and have new ones issued. Reissuing takes a few days and a few crowns. It can save you from really big trouble. If someone used your card after the attack, contact your bank — there's a decent chance they'll refund the money.

Make sure it isn't phishing

Fake "your data has leaked" notifications are everywhere. They're usually unconvincing, but not always. So if you're not sure, go to the website of the company that allegedly leaked the data. If they're at least half-decent, they'll have something on their site about the leak and what you should do. If you find nothing, look at other relevant sources.