State of California, Department of Industrial Relations data breach notice: what to do

What to do now

This is general guidance for anyone who receives a data breach notice. It is not specific to this incident and does not describe what information was involved. Read the official notice for details about your situation.

1. Read the official notice. It should say what happened, what kinds of information were involved, and whether free credit monitoring is offered (and the enrollment deadline).
2. Freeze your credit — it's free. A freeze stops new credit from being opened in your name. Contact each bureau separately:
   • Equifax credit freeze
   • Experian credit freeze
   • TransUnion credit freeze
3. Or place a free fraud alert. A fraud alert tells lenders to verify your identity before opening credit. Contact one bureau and it must notify the other two. An initial alert lasts one year.
4. Check your credit reports. Get free reports at AnnualCreditReport.com, the official site, and look for accounts you don't recognize.
5. Change passwords. If an account password may be involved, change it, and change it anywhere else you reused it. Turn on two-step verification where you can.
6. Watch your statements for bank, card, insurance, and medical charges you don't recognize, and be wary of calls, texts, or emails that mention the breach and ask for information.
7. If someone uses your information, report it and get a recovery plan at IdentityTheft.gov (Federal Trade Commission).

Read the full what-to-do guide →