What to do if your username or password was exposed in a data breach
Change the password everywhere you reused it and turn on two-step verification.
Free steps
- Change the password for that account and anywhere you reused it, and turn on two-step verification. Expect phishing emails that mention this breach.
More detail: our full what-to-do guide and the FTC’s IdentityTheft.gov.
Social Security number (282)Medical information (157)Health insurance information (113)Driver's license / state ID (121)Bank or financial account (100)Payment card (68)Passport number (53)Tax ID / tax documents (30)Date of birth (206)Username / password (18)
18 notices whose sample letter lists usernames and passwords
From the “What information was involved” section of each sample letter filed with the California AG, read automatically. Letters we couldn’t read aren’t counted, and your own letter is what applies to you.
- Blueberry Pediatrics
- Blueberry Pediatrics
- Catalyst Brands LLC
- Fishbrain AB
- USA DeBusk LLC
- Monmouth University
- Whitepages
- Stockton Cardiology Medical Group
- Discord Inc.
- Sher Tremonte LLP
- Southern Graphics Inc.
- Whitepages
- BYU-Pathway Worldwide
- Schewitz Psychological Services Inc (DBA: Couples Learn)
- Vanni and Humphrey
- Biagi Bros, Inc.
- NorthBay Healthcare Corporation
- Natomas Unified School District