What does data breach mean?#
When a service that holds your information is broken into, makes a mistake, or leaves data unprotected, your information may be published or sold. Sometimes the problem isn't yours at all; another service simply did a poor job.
What information leaks?#
Names, emails, phone numbers, passwords (sometimes hashed), addresses, purchase history, and sometimes identity documents. All of this can be used for targeted phishing, attempts to sign in to other accounts, and fraud.
Why is a reused password dangerous?#
Attackers try leaked passwords on other services too. If you used a password on an unimportant site that is similar to your main email's, that leak reaches your email as well.
What should we do after hearing about a breach?#
- Change the password for that service, and if it's reused elsewhere, change it there too.
- Turn on two-factor authentication.
- Watch for suspicious texts and emails that may be written using your real information.
- If your card number or banking details leaked, contact your bank.
- Use reputable email breach-checking services.
Prevention#
A unique password for each site (with a password manager), giving the least information necessary when signing up, and deleting unused accounts reduce the impact of a breach.
For business owners#
If your site holds customer information, you are responsible for protecting it. Encryption, backups, limited access, and transparent notification when an incident occurs are important.