Another company got breached. Your data might be floating on the dark web right now. Don't panic — but don't ignore it either. Here are 5 things you need to check and do, starting today.
1. Check If Your Email Was Compromised
Go to haveibeenpwned.com and enter your email address. This free service checks if your email appears in any known data breach. If it shows up — and for most people, it will — don't panic. It means your email and possibly associated password were part of a leaked database.
What to do: Change the password for every service where you used that email. Start with your primary email account, then banking, then social media.
2. Change Passwords on Critical Accounts
Focus on these accounts first, in this order:
- Email account — this is the master key. If someone controls your email, they can reset every other password.
- Banking and UPI apps — where your money lives.
- Social media — can be used for identity fraud or to scam your contacts.
- Any account using the same password — because hackers try leaked passwords on every platform.
The Password Rule
Every important account should have a unique password. Use a password manager like Bitwarden (free) to remember them. One master password to rule them all — securely.
3. Enable Two-Factor Authentication (2FA)
Even if your password is stolen, 2FA means the attacker still needs your phone to get in. Enable it on:
- Gmail / Email (Google Authenticator or SMS)
- Banking apps (most Indian banks support this)
- WhatsApp (Settings → Account → Two-step verification)
- Instagram, Facebook, Twitter
Prefer app-based 2FA (Google Authenticator, Authy) over SMS. SIM swap fraud can intercept SMS codes.
4. Monitor Your Bank Statements — Weekly
After a breach, scammers may have enough information to attempt small fraudulent transactions. These are test charges — if they go unnoticed, larger amounts follow.
What to look for:
- Transactions you don't recognise, even small ones (₹1, ₹5, ₹10)
- OTP messages you didn't request
- Login alerts from unknown devices or locations
- New beneficiaries added to your account that you didn't add
If you spot anything suspicious, call your bank's fraud helpline immediately. In India, you can also report cyber fraud at cybercrime.gov.in or call the national helpline 1930.
5. Freeze Your Credit If Necessary
If sensitive documents like your Aadhaar, PAN, or passport were part of the breach, someone could use them to open accounts or take loans in your name.
Steps to protect yourself:
- Lock your Aadhaar biometrics at
myaadhaar.uidai.gov.in - Check your CIBIL score for any unauthorized credit inquiries
- Set up transaction alerts on all bank accounts
- File a complaint with the RBI if your bank doesn't respond
Remember
Data breaches are not your fault. But protecting yourself after one IS your responsibility. Companies will get breached again. The question is whether your defenses are strong enough to make that breach meaningless for you personally.
The 5-Minute Drill
Bookmark this page. Every time you hear about a new data breach in the news, come back and run through these 5 steps. It takes 5 minutes. It could save you lakhs.