When you get that sinking feeling, an email or alert saying “your data has appeared in a breach”, it’s easy to panic. But taking calm, practical steps in the first few minutes can make all the difference.
According to Proton Mail’s Data Breach Observatory, there have already been 794 verified breaches so far in 2025, with more than 300 million individual records exposed.
Eamonn Maguire from the firm explained why stolen data remains such a lucrative trade:
“Criminals pay premium prices for stolen data because it consistently generates profit through fraud, extortion and cyber attacks.”
And although organisations must report incidents to regulators and notify affected customers, there’s no consistent rulebook for what happens next. That means much of the protection falls on you.
Step 1: Check where your data has been exposed
Start by visiting Have I Been Pwned – a trusted, free tool that shows whether your email addresses or phone numbers appear in known breaches.
If you see an entry listed, it doesn’t always mean your account has been hacked, but it does mean those credentials are circulating publicly or privately online.
Step 2: Change your passwords (and strengthen them)
If any affected account uses the same or similar password elsewhere, change them all immediately.
Create long, unique passphrases rather than complex ones you’ll forget. Think:
yellow-teapot-sings-quietly
is far stronger and easier to remember thanYtS!q2025.
A password manager like Keeper can generate and store strong passwords for every site securely.
Step 3: Turn on Multi-Factor Authentication (MFA)
Even if your password leaks, MFA can stop criminals in their tracks.
It adds a second layer, such as a one-time code or app approval, before access is granted.
Most major services (Microsoft, Google, Meta, banking apps, etc.) support it. Turn it on wherever possible.
Step 4: Be alert to follow-up scams
After major breaches, criminals often exploit the publicity. You may see phishing emails pretending to be “security updates” or “account verification requests.”
Don’t click. Instead, go directly to the service’s real website and log in from there.
Step 5: When a call feels real, but isn’t
One of the cruellest tactics we’re seeing more often involves fake support calls especially after a genuine service issue.
The grandparents of one of my son’s friends were recently caught out this way.
They’d had an internet outage and were waiting for their provider to call back.
When the phone rang, it sounded official – the caller knew their name, address and even their internet provider.
They were told there was a technical issue that needed remote access to fix.
The scammers guided them through installing “support software” on their computer and phone. Once connected, they took control, opened online banking, and moved large sums of money before the victims realised what was happening.
These scams work because they borrow details from real data breaches – enough to sound believable.
Once trust is gained, the attacker uses screen-sharing tools like AnyDesk or TeamViewer to gain full control. From there, they can see everything you type or even move your mouse and transfer funds.
How the scammers probably did it
Criminals often follow a predictable pattern:
Reconnaissance. They gather names, addresses, phone numbers and ISP details from breached data or public sources.
Enrichment. Extra details (social media posts, directories, leaked records) make the story sound real.
Timing. They monitor sites like Downdetector to spot genuine outages, then call during those windows so the timing feels credible.
Caller ID spoofing. They make the number look like your provider’s or a local one.
Social engineering. They use confident, professional language and confirm details they already have.
Remote access. The victim is persuaded to install “support” software, handing over full control.
Theft and lockout. Money is moved, passwords are changed and traces are deleted.
Re-use. Any captured data or credentials are reused or sold on.
If this happens to you
Disconnect the device from the internet straight away.
Call your bank using the number on your bank card (not one given by the caller).
Report to your broadband or phone provider.
Change your passwords from a clean device and enable MFA.
Report the crime via Action Fraud.
Ask for help from someone you trust – fast action matters.
Step 6: Review what data you share
Breaches remind us how much personal information we scatter online, from birthdays to full addresses.
Review privacy settings and reduce unnecessary exposure where possible. The less data available, the smaller the target.
Step 7: Stay informed
Use security awareness training at work and set calendar reminders to review passwords and MFA every few months.
Cyber security isn’t a one-off task – it’s an ongoing habit.
Black Swan Cyber Security Solutions helps small businesses protect themselves with practical, affordable measures like password management, MFA rollout and awareness training.
If you’d like a quick check-up or help building safer habits, book a review
