What it is
A data breach is when an organisation you dealt with loses control of information about you — an email address, phone number, password or ID details. You did nothing wrong, but leaked details can be used to break into accounts or to make scams far more convincing. Your response depends on what was exposed.
Why it matters to you
A leaked password can unlock any other account where you reused it.
Leaked contact or ID details fuel targeted phishing, SIM-swap and identity theft.
Criminals combine data from several breaches to impersonate you more convincingly.
How to protect yourself
Use a different password for every service, so one breach stays contained, and turn on multi-factor authentication. You can check whether your email has appeared in known breaches and change the exposed passwords. Treat calls and messages that quote real details about you with extra suspicion. See responding when your data is leaked.
If your data was exposed
Change the affected password immediately, and everywhere you reused it.
Enable multi-factor authentication on the affected account and your main email.
Watch your bank and mobile-money statements, and ignore anyone demanding payment to "remove" your leaked data.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.