Data breach

A data breach is when private information held by a company or website leaks or is stolen, exposing names, numbers, passwords or card details.

Data breach: A data breach happens when information stored by an organisation, such as a shop, bank, hospital or app, is exposed or stolen. The data may include names, phone numbers, addresses, passwords, Aadhaar-style details or card information, and criminals often sell or share it.

You usually cannot prevent a breach, since the company holds your data, not you. The harm shows up later as scam calls that know your name and order, phishing messages that mention a real purchase, or password attacks on your other accounts. Such personal details make scams much more believable. Breaches at shops, travel sites, loan apps and even small local services are all part of the problem, so it is wise to assume some of your data is already out.

After a breach notice, change the password for that service and anywhere else you used it, turn on two-factor authentication and be extra careful with calls or messages that quote your details. Give out only the data a service truly needs, because data that was never shared cannot be leaked. You can also freeze or watch your card or bank alerts for a while.

Tips

• Change the password of a breached service and any other account that shares it.
• Treat calls and messages that quote your real details with extra suspicion.
• Share only the information a service really needs when you sign up.

Related terms