Book a free 30 minute consultation

What to Do After a Data Breach: 7 Key Steps

Data breach notification on computer screen error

When it happens, you feel powerless. You receive an email or letter from a company saying your data has been breached. It happens far too often these days.

Data breaches impact banks, online platforms like Facebook, and e-commerce websites. Even government agencies aren’t immune, leaving personal information such as your address, National Insurance number, and card details vulnerable to criminals.

While you can’t control a company’s security, you can take steps to protect yourself after a breach. These actions can help you reduce financial and personal risks.

Change Your Passwords

The first step is to change your passwords. Start with the account linked to the breached service. Then, update any accounts where you’ve reused the same password.

Using unique passwords for every account is crucial to prevent multiple logins from being compromised. A password manager can help you create and store strong passwords securely, so you only need to remember one master password.

Enable Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security, even if someone has your password. Enable it on the affected account and any others where possible.

Common types of 2FA include:

  • One-time passcodes sent via text (last resort as not very secure)
  • Authentication apps (like Google Authenticator)
  • Physical security keys

Monitor Your Bank Accounts

If your payment details were compromised, monitor your bank accounts closely for suspicious activity. Notify your bank immediately to minimise potential losses.

Banks in the UK offer robust protections against fraud, but they need to know about the breach to act. You may also want to request a new debit or credit card number to stay ahead of potential misuse.

Request a Credit Report and Add a Fraud Alert

IPersonal data stolen in breaches is often sold online, which could lead to someone attempting to take out credit in your name.

Contact credit reference agencies like Experian or Equifax to request a report and consider adding a protective registration to your account. Services such as Cifas can add an additional layer of fraud prevention by flagging your file for suspicious credit applications.

Carefully Review the Breach Notification

Pay close attention to the details of the breach notification you received. This will help you understand what was exposed and how it could impact you.

Look for:

  • The type of data affected (e.g., passwords, bank details)
  • Any steps the company is taking to help (like offering credit monitoring)
  • Instructions for securing your account
 

Revisit the company’s website for updates, as more details may emerge later.

Strengthen Your Online Defences

Enhance your personal cyber security to reduce future risks. Key tools include:

 

A Virtual Private Network (VPN) is another valuable tool, especially when using public Wi-Fi, to keep your online activities private.

Stay Alert to Phishing Scams

Email addresses exposed in breaches often lead to an increase in phishing attempts. Criminals use these emails to trick victims into sharing further personal details.

Stay vigilant and follow these tips to avoid phishing scams:

  • Hover over links to check where they lead before clicking.
  • Go directly to official websites rather than clicking on email or SMS links.
  • Be cautious of unknown senders and unexpected messages.
  • Watch for scams on social media and messaging apps.
 

If in doubt, verify communications by contacting the company directly.

Keep Your Devices Updated

Hackers often exploit outdated software with known vulnerabilities. Regularly update:

  • Your operating system
  • Apps and software
  • Device firmware (including routers and smart devices)
 

Set your devices to update automatically to avoid missing critical security patches.

Protect Your Data with Professional Support

Keeping up with the latest threats can be challenging. Our managed cyber security services provide peace of mind with expert protection for your devices and network.

Contact us today to discuss how we can help secure your personal or business systems.

Kevin Walker, Founder of Black Swan Cyber Security Solutions

Written by: Kevin Walker

Founder, Black Swan Cyber Security Solutions

Based in Chesterfield, Kevin has over 20 years’ experience helping schools, care providers and small businesses meet DfE and Cyber Essentials standards. He’s passionate about calm, compliance-led cyber security and supporting local communities across Derbyshire and South Yorkshire.

View LinkedIn Profile ↗

Recent Posts

Stay Ahead of Cyber Threats - Subscribe to the Black Swan Cyber Security Newsletter

Protect your business with the latest cyber threat insights and practical data protection tips. Subscribe for expert advice tailored to small businesses, covering password security, ransomware prevention, and cyber compliance.

Stay connected with Black Swan Cyber Security Solutions and keep your company ahead in the fight against cybercrime.