What to Do After a Data Breach Notification?

In the aftermath of a data breach, it is very important for anyone whose personal information was publicly exposed to take steps to protect their credit and finances. While not exhaustive, the following list provides a number of actions that consumers should consider taking to protect themselves.

1. Put a fraud alert on your credit reports.A fraud alert flags your credit report and notifies lenders and creditors that they should take extra steps to verify your identity before extending credit. To place a fraud alert on all three of your credit reports, you need to contact only one of the three credit reporting agencies (Experian, Equifax, or TransUnion). When you place the initial alert, the agency will automatically notify the other two for you.

When you place a fraud alert on your credit reports, you’re entitled to a free copy of your credit report from each of the three agencies. Be sure to obtain them. If you find fraudulent items on your credit report(s), the simplest way to begin the dispute process is to click the dispute button while viewing your credit report online. Some items must be disputed in writing and with supporting documentation. Hard inquiries cannot be disputed but may give you a clue as to where a thief has applied for credit in your name.

Another option is to place a security freeze on each of your credit reports. A freeze prevents creditors (except those with whom you already do business) from accessing your credit report(s). Most new applications will automatically be declined because, without access to your file, the creditor will have no way to evaluate your credit. With a security freeze in place, you will need to take extra steps if you wish to apply for new credit. Each agency has a procedure for temporarily “thawing” your file to allow a legitimate application to be processed. Unlike a fraud alert, however, you’ll need to contact each credit reporting agency individually to place a freeze on your files. See more information about credit freezes here:

• Experian
• Equifax
• TransUnion

2. Sign up for a credit monitoring serviceThere are several companies that offer credit monitoring services, and consumers should select the one that fits their individual needs. The following option provides a list of a number of them: Reviews.com/identity-theft-protection-services/.

3. Review your credit reports for suspicious activity such as accounts you do not recognizeRequest copies from all three major reporting agencies and look for any accounts you may not recognize. By law, you’re entitled to at least one free credit report from each agency each year. While plenty of websites and creditors promise free credit reports, the official site to request them is AnnualCreditReport.com.

4. Contact the Federal Trade CommissionReport the incident directly to the Federal Trade Commission (FTC) by submitting an Identity Theft Report. You can file your report online at FTC.gov or Identitytheft.gov, by phone (toll-free) at 877-ID THEFT (877-438-4338) or TDD (toll-free) at 866-653-4261, or by mail: 600 Pennsylvania Ave., Washington, DC 20580.

The FTC will provide you with information about what to do next, depending on what type of fraud was (or may have been) committed.

5. File a police reportIn addition to filing a report with the federal government, you should contact your local police department. This step isn’t as much about getting the police to investigate the crime as it is about creating a paper trail to show you were proactively addressing the problem. Although the police may not be able to do anything if your identity was stolen by criminals online and overseas, your report could help them track down someone who is stealing information locally.

6. Protect your Social Security numberIf your Social Security number was or may have been compromised, contact the Social Security Administration (800-269-0271) and the Internal Revenue Service (800-829-0433).

It’s important to talk to the Social Security Administration and the Internal Revenue Service if you have reason to believe your Social Security number has been compromised, even if you don’t yet see any evidence of financial fraud. A thief could be planning to swipe your tax refund or obtain employment or healthcare in your name.

7. Contact the post officeIf you have reason to believe the identity thief may have submitted a fraudulent change of address to the post office or has used the U.S. mail to commit fraud against you, contact the Postal Inspection Service, which is the law enforcement and security branch of the U.S. Postal Service. You may report any suspicious activity in this regard online at Postalinspectors.uspis.gov.

8. Scan credit card and bank statements for unauthorized chargesPull up your accounts and scan old statements for charges you don’t recognize. Don’t forget to review dormant or infrequently used accounts, as well. If you find unknown charges, call the financial institutions to alert them of the problem and request that the account be locked or closed.

9. Implement preventive measures going forwardAlthough some cases of identity theft are unavoidable, there are ways to make yourself less likely to be a victim. These include the following:

• Creating strong passwords and regularly changing them.
• Shredding documents with personal information when disposing of them.
• Keeping personal information such as your address and phone number off social media sites, as well as any details you use for online security questions, like your mother’s maiden name.
• Not carrying your Social Security card in your wallet.

10. Use caution when reviewing suspicious emailsClicking unknown links in emails is another way to make yourself an easy target for identity thieves. Clicking a link sent to you by an identity thief could result in your inadvertently downloading malware or keylogger software that thieves use to mine your computer for personal information.

This list is not meant to be exhaustive, and there may be other protective measures that you should consider taking, based upon your personal situation and finances. There are also other sources of information that you may want to consult, including but not limited to the Federal Trade Commission, the Federal Bureau of Investigation, and the Internal Revenue Service.

Thank you for contacting Morgan & Morgan. If you have any questions or if we can be of further service, please contact us at jyanchunis@forthepeople.com or at 813-275-5272.

*This document is provided for informational purposes only. It does not constitute legal advice, nor does it create an attorney-client relationship.