Enrichment · Passion Projects

A breach letter came.
Here is what to do.

A breach notice tells you a company lost your data; it rarely tells you what to do next. Mark what was exposed, and the checklist shows the steps that match it: a password calls for one thing, a Social Security number for something stronger. It checks the notice is genuine first, since fake breach letters are a scam of their own.

Add a noticeWhat you get

Your breach notices

The worked example is made up: a clinic breach that exposed a Social Security number, birth date and medical information, with free monitoring to claim by Dec 1, and an older game store password breach already handled. Saved on this device only.

Loading the breach form. If nothing appears, turn on JavaScript.

What you get

Enrichment · Passion ProjectsFree

What you finish with
A record per breach notice with company, date, how it arrived, what was exposed and any monitoring deadline; three checks that the notice is real; nine response steps marked done, not yet or does not apply. Flags the steps each exposed item calls for and a monitoring deadline within 30 days; counts steps done per notice.
Who it is for
Adults and families who receive breach notices, and older students learning to protect their own accounts.
Format
Browser checklist with a saved record per notice. Prints one notice’s steps, every notice as a table or a blank checklist; downloads a spreadsheet (.csv); exports and imports a file.
Access
Free. No account, no sign-in and nothing to install. Everything you type stays in this browser; nothing is sent to Caveat.
Where it lives
The Passion Projects space in Caveat Enrichment.
Support
Questions about access, an order or a correction: team@caveatacademic.com.

How to use it

  1. Check the notice is real using contact details you find yourself.
  2. Mark exactly what was exposed.
  3. Work through the steps that apply, strongest first.
  4. Note the monitoring deadline and sign up if it is offered.
  5. Keep the record; breaches can be used against you months later.

Add a notice

Step by data type

Match the step to what leakedPasswordChange it everywhere you reused it; turn ontwo-step sign-inCard or bank numberAsk the bank for new numbers; watch statementsSocial Security numberFreeze credit at all three bureaus; IRSIdentity Protection PINMedical or insuranceRead every explanation of benefits; ask theinsurer about unknown claimsEmail address onlyExpect more scam emails; do not click breach“alerts”Match the step to what leakedPasswordChange it everywhere you reused it;turn on two-step sign-inCard or bank numberAsk the bank for new numbers; watchstatementsSocial Security numberFreeze credit at all three bureaus;IRS Identity Protection PINMedical or insuranceRead every explanation of benefits;ask the insurer about unknown claimsEmail address onlyExpect more scam emails; do not clickbreach “alerts”
From the Federal Trade Commission’s guidance on data breaches, in short form.

Freeze or alert

A credit freeze stops new lenders from seeing your credit report, which blocks most new accounts in your name. Placing and lifting it is free at each of the three bureaus under federal law, and you can freeze a child’s credit too. A fraud alert is lighter: lenders must take extra steps to confirm it is you. One call to any bureau places it at all three for a year.

If someone used your data

A breach is not identity theft yet. If you find accounts, tax returns or bills you did not make, report it at IdentityTheft.gov, the Federal Trade Commission’s site, which builds a recovery plan and an identity theft report you can give to businesses and the police.

Sources

  1. Federal Trade Commission. Data Breach Response: A Guide for Consumers and What to Do After a Data Breach (consumer.ftc.gov; identitytheft.gov).
  2. Federal Trade Commission. Credit Freezes and Fraud Alerts (consumer.ftc.gov).
  3. Internal Revenue Service. Get an Identity Protection PIN (irs.gov/ippin).
  4. AnnualCreditReport.com, authorized by federal law: free credit reports from Equifax, Experian and TransUnion.

The worked example is made up. This is general information about federal consumer protections, not legal advice. Nothing you type is sent to Caveat; never type full account or Social Security numbers here. Support: team@caveatacademic.com.