Understand what a breach means for you
A data breach is when an organisation you dealt with loses control of information about you, such as your email address, phone number, password or ID details. You did nothing wrong, but the leaked details can be used to break into accounts or to make scams more convincing. Your response depends on what was exposed.
If a password was exposed
Change that password immediately. If you reused it anywhere else, change it on every one of those accounts too.
Turn on multi-factor authentication or a passkey on the affected account and your main email.
Stop reusing passwords: a unique password for each service means one breach stays contained.
If contact or identity details were exposed
You cannot un-leak a phone number or ID number, so expect targeted scams. Treat calls, SMS and emails that quote real details about you with extra suspicion, because knowing your name, bank or recent purchase does not prove who is contacting you. Verify any request through a channel you already trust. Watch your mobile-money and bank statements for a while.
Check where your details have appeared
A reputable breach-notification service lets you check whether your email address has appeared in known breaches and can alert you to future ones. Use it as a prompt to change exposed passwords, not as a reason to pay anyone. Ignore messages claiming your data is for sale and demanding payment to remove it.
If the breach involved your money or ID
Contact the bank or provider through official channels, ask what they are doing and what you should do, and keep the case reference. Keep a short record of what was exposed and when. No one can guarantee removal of leaked data, and anyone demanding an advance fee to "erase" it is running a scam.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.