Monitor breaches and watch for scams

On this page

• • Check if your data has been leaked
  • What to do if your information has been compromised

Your personal information can be part of a data breach, and you may not even know it.

Here are some simple ways to check if your information has been compromised: 

• 1. Use breach-check websites

     Type in your email or username in breach-check websites to see if your information has been leaked in the past. They let you know if your name, email, or phone address has appeared in recent data dumps. You can seek out recommendations from trusted reviewers to select a breach-check tool that is right for you. 

  2. Look up California breach reports

     The California Attorney General keeps a list of all data breaches that affect 500 or more people. You can search for leaks to see what kind of personal information may have been exposed.  

  3. Watch for signs of suspicious activity

     Criminals can use data leaks to their advantage.  Targeted scams use your personal information to appear real. Look out for strange emails, password reset messages that you didn’t request, unknown logins, or even charges you don’t recognize. These could be signs that someone has access to your account. When in doubt, go directly to the official website or app instead of clicking on links. The Cybersecurity Infrastructure Security Agency has helpful resources on how to recognize and report phishing scams. 

  4. Check your login history 

     Some websites and apps let you see where or when your account was used. If you see a login from a place or device you don’t recognize, your account may be compromised.  

If you think your information has been exposed or compromised, there are immediate steps you can take to better protect your data.

Here’s what to do:

• 1. Change your password on that account 

     Choose a new, unique passphrase. If you’ve used the compromised password on other accounts, change those too.  

  2. Take extra steps if the breach exposed sensitive personal data 

     The California Department of Justice provides resources for victims of identity theft. You can also file a complaint with the Federal Trade Commission on a range of fraud concerns, including identity theft. In addition, the California Department of Financial Protection and Innovation has a helpful guide with tips on how to safeguard your personal and financial information. 

  3. Sign up for breach alerts 

     Some breach-check or password managers offer breach monitoring. Breach monitoring lets you know if your information has appeared in a new leak. You can add alerts for each email address you use online. This helps you act fast to secure your accounts. Use the advice or recommendation of a trusted reviewer to help select a tool.