What to Do After a Data Breach

By NorwegianSpark Editorial · Published July 10, 2026 — written with AI assistance and reviewed by the NorwegianSpark SA editorial team.

Sooner or later, almost everyone's details end up in a data breach — not through anything you did wrong, but because a company holding your information was compromised. Panic does not help; a short, ordered response does. The goal is to close off the ways the leaked data could be used against you, starting with the most damaging.

First, work out what was exposed, because the right response depends on it — a leaked password is a very different problem from a leaked card number or national ID. If a password was involved, change it immediately, and change it anywhere you reused it, which is the common and costly mistake. If payment details leaked, contact your bank to freeze or reissue the card. The US FTC's IdentityTheft.gov (2026) walks through the specific steps for each type of exposed information, and if you are unsure whether your accounts have appeared in known breaches, a reputable breach-notification service such as Have I Been Pwned lets you check your email address for free.

Once the immediate holes are plugged, harden what remains. A password manager makes the essential step — a unique password for every account — actually feasible, and NordPass can generate and update them quickly across your accounts. Turning on two-factor authentication means a stolen password alone is no longer enough. If sensitive identifiers leaked, ongoing identity and dark-web monitoring such as Norton's can give early warning that the data is being misused, and reducing how much of your information is publicly for sale in the first place — through a data-removal service like iolo RemoveMe and the steps in our data broker removal guide — shrinks the raw material for future fraud.

A breach is also a prompt to shore up the basics that prevent the next one: recognising the follow-on phishing scams that often target breach victims, and the broader plan in identity theft protection. For the privacy side of your setup, our sister site VPNTex covers the VPN layer. Act quickly on passwords and payment details, then monitor and reduce your exposure over the following weeks. General guidance, not legal or financial advice.