I received a data breach letter. What should I do?

1. Contact the company through its known website or an old statement. Do not rely on links or phone numbers in an unverified notice.
2. Find out what was exposed. Change affected passwords and contact your bank if financial information was involved.
3. In the US, consider credit freezes for exposed identity details. Verify any free monitoring offer and its enrollment deadline with the company.

Get help if

A notice requests money or account passwords, or you discover actual misuse of the exposed information.