We first wrote this after the 2017 Equifax breach, which exposed the personal data of about 147 million Americans. We updated it in October 2026 because the rules have changed in your favor: credit freezes are now free, and fraud alerts last longer. The advice applies to any data breach.
Hearing that your personal information may have been exposed is never good news. But you do not need to live in fear. Here are the steps that protect you.
1. Put a fraud alert on your credit
A fraud alert tells lenders to take extra steps to verify it is really you before opening new credit. It can make applying for a loan a little slower, but that is worth it compared with having your identity stolen. Contact any one of the three bureaus (Equifax, Experian or TransUnion) and that bureau notifies the other two. Fraud alerts are free.
There are three types:
- Initial fraud alert. For anyone worried about identity theft, for example after a breach or a lost wallet. It lasts one year and you can renew it.
- Extended fraud alert. For confirmed identity theft victims. It lasts seven years.
- Active duty military alert. For service members who want to protect their credit while deployed. It lasts one year.
2. Want more protection? Freeze your credit
A credit freeze locks your credit report so no one can open new credit in your name until you lift it. Since 2018, freezing and unfreezing your credit is free at all three bureaus, and you need to contact each bureau separately. A freeze does not stop misuse of accounts you already have, and you will need to lift it temporarily when you apply for credit. If you feel your information is at risk, it is the strongest protection available.
Fraud alert or freeze? The FTC puts it simply: a freeze locks down your credit, while a fraud alert still lets lenders see your report as long as they verify your identity first. Either way, keep watching your bank, credit card and insurance statements for charges you did not make.
3. Watch your credit reports for fraud
Keep an eye on your reports for accounts or inquiries you do not recognize. If you want all three bureaus in one place, CreditScoreIQ shows your three-bureau reports and helps you dispute what is wrong. (Affiliate link: CreditScoreIQ is a separate company, and Moodie Bluez may earn a commission if you sign up.)
If you find accounts that are not yours, report the identity theft at IdentityTheft.gov, the FTC’s official site. And if false accounts end up on your credit report, we can help.
Stay safe. For more on protecting yourself after a breach, see the FTC’s guide to credit freezes and fraud alerts.