What should I do first if my passport number was exposed?

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn't affect your score.

Is the breach letter real?

Organizations that notify more than 500 Californians must file a sample letter with the California Attorney General, so a matching listing on oag.ca.gov is a good sign the notice is genuine.

What to do if your passport number was exposed in a data breach

A passport number is a strong identity document. Freeze your credit, and report suspected misuse to the State Department.

Free steps

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn’t affect your score.
Passport number: if you suspect misuse, report it to the State Department.

More detail: our full what-to-do guide and the FTC’s IdentityTheft.gov.

Social Security number (282)Medical information (157)Health insurance information (113)Driver's license / state ID (121)Bank or financial account (100)Payment card (68)Passport number (53)Tax ID / tax documents (30)Date of birth (206)Username / password (18)

53 notices whose sample letter lists passport numbers

From the “What information was involved” section of each sample letter filed with the California AG, read automatically. Letters we couldn’t read aren’t counted, and your own letter is what applies to you.