What to do first if your Social Security number was exposed in a data breach
Discovering your Social Security number was exposed can be alarming, but taking quick, informed action can help protect your identity and limit potential damage.
1. Report the breach to the FTC
The first step is to report the exposure to the Federal Trade Commission at IdentityTheft.gov. This official government site will guide you through creating a recovery plan tailored to your situation. Filing a report also creates an official record that can help if you need to dispute fraudulent accounts later.
Link to IdentityTheft.gov
2. Place a fraud alert on your credit reports
A fraud alert tells lenders to take extra steps to verify your identity before opening new accounts. You only need to contact one of the three major credit bureaus—Equifax, Experian, or TransUnion—and they will notify the others. The alert is free and lasts one year, renewable. You can also get free weekly online credit reports from each bureau at AnnualCreditReport.com to check for suspicious activity.
Link to AnnualCreditReport.com, where free weekly online credit reports are available from Equifax, Experian, and TransUnion
3. Consider a credit freeze
A credit freeze (also called a security freeze) is a more powerful step that restricts access to your credit report entirely, making it nearly impossible for identity thieves to open new accounts in your name. It is free and can be lifted temporarily when you need to apply for credit. You must freeze your credit with each bureau individually.
Link to each bureau's freeze page
4. Monitor your accounts and credit reports
Regularly review your bank and credit card statements for unauthorized charges. Take advantage of free weekly online credit reports from Equifax, Experian, and TransUnion at AnnualCreditReport.com to spot accounts you don't recognize. Consider setting up account alerts for transactions over a certain amount.
Link to AnnualCreditReport.com, where free weekly online credit reports are available from Equifax, Experian, and TransUnion
5. Protect your tax refund
If your Social Security number is compromised, someone could file a fraudulent tax return in your name. File your taxes as early as possible to beat scammers. If you suspect tax-related identity theft, the IRS recommends filing Form 14039, Identity Theft Affidavit, and contacting the IRS Identity Protection Specialized Unit.
Link to IRS data breach page
6. Consider identity theft protection services
After taking free steps, you may want to explore paid identity theft protection services that offer credit monitoring, dark web scans, and identity restoration support. These services can provide ongoing monitoring and alerts, but no service can guarantee complete safety. Compare plans to find one that fits your needs.
Link to /go/identity for comparison
Check your identity exposure level
Take a quick assessment to see how at risk you are and get personalized recommendations.
FAQ
What should I do first if my Social Security number is leaked?
First, report the breach to the FTC at IdentityTheft.gov to get a recovery plan. Then place a fraud alert on your credit reports and consider a credit freeze.
Can I get a new Social Security number?
The Social Security Administration rarely issues a new number. It is only granted in extreme cases of identity theft where you have proven ongoing misuse. Most people can manage the risk with fraud alerts, freezes, and monitoring.
How do I check if someone is using my Social Security number?
Monitor your credit reports for free weekly online credit reports from Equifax, Experian, and TransUnion at AnnualCreditReport.com, review your bank and credit card statements, and watch for IRS notices about tax returns you didn't file.
Is a credit freeze better than a fraud alert?
A credit freeze is stronger because it blocks all access to your credit report, while a fraud alert only requires lenders to verify identity. A freeze is recommended if you are certain your SSN is compromised.
Compare identity protection plans
See side-by-side comparisons of top identity protection services to find the right fit.
Sources
CreditSecurity provides educational tools and action checklists. It does not provide legal, financial, credit repair, or identity theft recovery services. Some links may be affiliate links, which means CreditSecurity may earn a commission if you choose a partner service.