What should I do first if my tax IDs or tax documents was exposed?

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn't affect your score.

Is the breach letter real?

Organizations that notify more than 500 Californians must file a sample letter with the California Attorney General, so a matching listing on oag.ca.gov is a good sign the notice is genuine.

What to do if your tax ID or tax documents were exposed

Tax data lets someone file a return in your name. An IRS Identity Protection PIN stops that.

Free steps

Freeze your credit at all three bureaus (free): Equifax, Experian and TransUnion. A freeze blocks most new accounts in your name and doesn’t affect your score.
Get an IRS Identity Protection PIN at IRS.gov. It stops someone filing a tax return with your Social Security number.

More detail: our full what-to-do guide and the FTC’s IdentityTheft.gov.

Social Security number (282)Medical information (157)Health insurance information (113)Driver's license / state ID (121)Bank or financial account (100)Payment card (68)Passport number (53)Tax ID / tax documents (30)Date of birth (206)Username / password (18)

30 notices whose sample letter lists tax IDs or tax documents

From the “What information was involved” section of each sample letter filed with the California AG, read automatically. Letters we couldn’t read aren’t counted, and your own letter is what applies to you.