Identity theft is a frightening experience that can leave you feeling vulnerable and overwhelmed. Recently, a massive data breach confirmed by National Public Data compromised 2.9 billion records, including Social Security numbers, names, addresses, email addresses, and phone numbers. With such sensitive information now at risk, the threat of identity theft is more significant than ever. If you suspect your identity has been stolen, it’s essential to act quickly and methodically to minimize the damage.
Confirm the Theft
The first step is to confirm that identity theft has occurred. Here are some common signs:
- Unauthorized Transactions – If you notice charges on your bank account or credit card that you didn’t make, it’s a red flag.
- Unexpected Bills or Collection Notices – Receiving bills or collection notices for accounts you didn’t open or services you didn’t use is a clear sign.
- Changes in Credit Score – Unexplained drops in your credit score could indicate fraudulent activity.
- Rejected Tax Return – If your tax return is rejected because one has already been filed under your Social Security number (SSN), you might be a victim of tax-related identity theft.
Once you’ve recognized the signs, it’s time to take immediate action.
Alert Your Bank and Credit Card Companies
As soon as you suspect identity theft, contact your bank and credit card companies. Report the unauthorized transactions and request that your accounts be frozen or closed. This prevents the thief from continuing to make fraudulent charges.
- Request New Account Numbers – Ask for new account numbers and, if necessary, new debit and credit cards with different PINs.
- Monitor Account Activity – Keep an eye on your accounts for any further suspicious activity. Regularly review your statements and consider setting up alerts for transactions.
Place a Fraud Alert on Your Credit Reports
Contact one of the three major credit bureaus—Equifax, Experian, or TransUnion—to place a fraud alert on your credit report. The bureau you contact is required to notify the other two.
Fraud Alert Duration – An initial fraud alert lasts for one year and is free of charge. This alert informs potential creditors to take extra steps to verify your identity before extending credit.
Extended Fraud Alert – If you’ve filed a police report, you can request an extended fraud alert, which lasts seven years.
Obtain and Review Your Credit Reports
After placing a fraud alert, request a free copy of your credit report from each of the three credit bureaus. By law, you’re entitled to one free report annually from each bureau, but you’re also entitled to additional free reports when you place a fraud alert.
- Review for Accuracy – Check your credit reports for unfamiliar accounts, inquiries, or incorrect personal information.
- Dispute Errors – If you find any errors or fraudulent accounts, dispute them immediately with the credit bureaus and the companies that reported the information.
File an Identity Theft Report with the FTC
Filing a report with the Federal Trade Commission (FTC) is a critical step. The FTC will provide you with a personalized recovery plan.
- Go to IdentityTheft.gov – Visit IdentityTheft.gov to report the theft and get your recovery plan.
- Create an Identity Theft Affidavit – After filing your report, the FTC will generate an Identity Theft Affidavit, which you can use to dispute fraudulent accounts.
File a Police Report
While the FTC report is essential, filing a police report can also be helpful, especially when disputing fraudulent charges or accounts.
- Provide Documentation – Bring a copy of your FTC Identity Theft Affidavit, any proof of the theft (e.g., unauthorized charges, collection notices), and a government-issued ID to your local police station.
- Get a Copy of the Police Report – Request a copy of the report for your records and to provide to creditors and credit bureaus.
Freeze Your Credit
Placing a credit freeze on your report makes it difficult for thieves to open new accounts in your name. A credit freeze prevents creditors from accessing your credit report, which is necessary to approve new credit.
- Freeze Your Credit Online – Visit Equifax, Experian, and TransUnion. Follow the steps in their respective sites on how to freeze your credit. If you find when setting up accounts on these sites you are unable to setup the profile or login that is most likely that they have used your data, including dob / drivers license # / Social. If this is the case then call 1-866-617-1893 for assistance.
- Keep Your PIN or Password Safe – When you place a freeze, the credit bureaus will provide you with a PIN or password. Keep this information secure, as you’ll need it to lift the freeze.
Dispute Fraudulent Accounts and Charges
Use your FTC Identity Theft Affidavit and police report to dispute any fraudulent accounts or charges.
- Contact the Fraud Department – Reach out to the fraud department of the companies where fraudulent accounts were opened. Provide them with copies of your Identity Theft Affidavit and police report.
- Request Written Confirmation – Ask for written confirmation that the fraudulent account has been closed and the charges have been removed.
Change Your Passwords and Secure Your Accounts
Identity thieves often gain access to personal information through weak or compromised passwords. Change the passwords on all your online accounts, especially those linked to your financial information.
- Use Strong, Unique Passwords – Create complex passwords that include a mix of letters, numbers, and symbols. Avoid using the same password across multiple accounts.
- Enable Two-Factor Authentication – Whenever possible, enable two-factor authentication (2FA) for an extra layer of security.
Notify the IRS if Your SSN Was Compromised
If your Social Security number (SSN) was stolen, notify the Internal Revenue Service (IRS) immediately to prevent tax-related identity theft.
- File IRS Form 14039 – Submit IRS Form 14039, Identity Theft Affidavit, to alert the IRS of the theft.
- Monitor Your Tax Returns – Keep an eye on your tax returns and consider filing early to prevent a thief from filing in your name.
Opt Out of Data Aggregator Sites
To protect yourself from further identity theft, consider opting out of data aggregator sites like PeopleConnect’s platforms (e.g., TruthFinder, Intelius, and Instant Checkmate). These sites compile and share personal information, making it accessible to anyone with an internet connection. By opting out, you can remove your personal data from these databases.
- Visit Each Site: Go to the opt-out pages of these platforms and follow the instructions to remove your data.
- Use Our Resource: We have a list of websites with direct links to opt out, making the process easier.
- Regularly Check and Re-opt Out: These sites may re-add your information periodically, so it’s essential to check back and re-opt out as necessary.
Implement Immediate Response and Security Measures
Beyond individual actions, if your organization holds data that was compromised, take the following steps:
- Contact Authorities: Report the breach to the FTC and local law enforcement.
- Notify Affected Individuals: Transparency is crucial. Inform those affected by the breach as soon as possible.
- Strengthen Security Protocols: Implement stronger encryption, two-factor authentication, and regular security audits to prevent future breaches.
- Engage Cybersecurity Experts: Consider hiring professionals to assess systems, patch vulnerabilities, and monitor for suspicious activities.
Damage Control and Legal Considerations
If your website or service was involved in the breach:
- Offer Support – Provide affected individuals with resources such as credit monitoring, identity theft protection, and a dedicated support line.
- Issue a Public Statement – Be transparent about the breach, your response, and steps to prevent future incidents.
- Consult Legal Counsel – Understand your liabilities and responsibilities, and ensure compliance with data protection laws.
13. Monitor the Situation and Develop a Long-term Strategy
- Stay Updated – Keep track of developments related to the breach and monitor for any further security incidents.
- Rebuild Trust – Focus on rebuilding trust with users by demonstrating your commitment to security.
- Review Data Practices – Assess and minimize the sensitive information your business collects, stores, and processes.
Consider Identity Theft Protection Services
While not necessary for everyone, identity theft protection services can help monitor your accounts, provide alerts, and assist with recovery if your identity is stolen again.
- Evaluate the Services – Research and compare different services to determine if they offer the protection you need. Some credit monitoring services are available for free through your bank or credit card issuer.
Consider Using Data Removal Services
Managing and removing your personal information from data brokers and people-search sites can be overwhelming. To make this process easier, consider using data removal services. These services actively monitor and remove your data from various online platforms, providing peace of mind.
Advantages of Data Removal Services
- They handle the entire removal process for you.
- They target multiple data broker sites at once.
- Many services offer ongoing monitoring and removal.
Here’s a list of recommended data removal services along with their pricing:
- OneRep – OneRep offers automated removal of personal data from over 100 people-search websites. They provide ongoing monitoring and removal services to help keep your information private.
- Price: $14.95 per month or $99.95 per year (billed annually)
- DeleteMe – DeleteMe helps remove personal information from data broker websites, and they offer ongoing monitoring to ensure that your information stays off these sites.
- Price: $10.75 per month (billed annually at $129 per year) or $8.71 per month (billed biennially)
- Incogni – Incogni, owned by Surfshark, sends out removal requests to data brokers and keeps your data off these sites. They offer an easy-to-use interface with ongoing monitoring.
- Price: $12.99 per month or $6.49 per month (billed annually at $77.88 per year.
- Privacy Bee – Privacy Bee specializes in removing your data from people-search sites, data brokers, and other online directories. They offer a full suite of privacy services.
- Price: $197 per year
- DataSeal – DataSeal focuses on removing your data from over 80 people-search sites. They provide a straightforward, manual removal process as well as ongoing monitoring.
- Price: $19.99 per month or $199.99 per year
- Removaly – Removaly offers data removal services focusing on removing your personal information from data brokers and online directories. They provide a user-friendly platform for managing your removals.
- Price: $89.99 per year
- EraseMe – EraseMe offers automated removal of personal information from over 230 data brokers and other online sites. They also provide monitoring services to ensure your data stays private.
- Price: $9.95 per month or $99.95 per year
Using one of these services can help you maintain better control over your personal information online.
Keep Detailed Records of Your Recovery Process
Document every step you take during the recovery process. Keep records of your communications with banks, credit bureaus, and any companies involved.
- Save Correspondence – Keep copies of letters, emails, and notes from phone calls.
- Organize Your Documents – Store all your documents in a secure, organized manner for easy access.
Stay Vigilant and Proactive
Recovering from identity theft is a process that requires diligence and persistence. By following these steps, you can regain control of your identity and minimize the long-term impact. Stay vigilant by regularly monitoring your accounts and credit reports, and take steps to secure your personal information to prevent future incidents.
Identity theft can be a traumatic experience, but with a systematic approach, you can recover and protect yourself from further harm.
