What should I do first if my Social Security number was exposed?

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn't affect your score.

Is the breach letter real?

Organizations that notify more than 500 Californians must file a sample letter with the California Attorney General, so a matching listing on oag.ca.gov is a good sign the notice is genuine.

What to do if your Social Security number was exposed in a data breach

A Social Security number can be used to open credit, file a fake tax return or claim benefits. A credit freeze and an IRS Identity Protection PIN block the most common misuse.

Free steps

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn’t affect your score.
Get an IRS Identity Protection PIN at IRS.gov. It stops someone filing a tax return with your Social Security number.
Check your Social Security record: create or review your my Social Security account so no one else can claim it.

More detail: our full what-to-do guide and the FTC’s IdentityTheft.gov.

Social Security number (282)Medical information (157)Health insurance information (113)Driver's license / state ID (121)Bank or financial account (100)Payment card (68)Passport number (53)Tax ID / tax documents (30)Date of birth (206)Username / password (18)

282 notices whose sample letter lists Social Security numbers

From the “What information was involved” section of each sample letter filed with the California AG, read automatically. Letters we couldn’t read aren’t counted, and your own letter is what applies to you.