Compare Revisions
What to do after a data breach
Revision 236174:
Revision 236174 by Fabi.L on
Revision 256415:
Revision 256415 by lsiebert on
Keywords:
Search results summary:
Learn to track a data removal request in Mozilla's Data Removal Pilot.
For instructions on what to do after a data breach, check this article.
Content:
In this article, you'll learn to track your data removal request.
#Visit https://monitor.firefox.com
#Click on {button Data Removal} in the top navigation panel.
If your initial data removal request is pending, you will see a notification saying that your request is still being processed. Initiating data removal is a process that can take up to 24 hours.
Once your request is processed, you'll see information about the data you're monitoring sorted in tabs, the name of the websites on which your data was found, the status of the removal request, and the risk level. If you expand the tabs, you will see more information about your identity on those websites.
=Risk Levels=
*'''Low:'''The site is sharing personal information, but you likely posted it yourself or provided consent.
*'''Medium:'''The site shares contact information like name, email, or phone number without your permission.
*'''High:'''The site shares location information, contact information, or credentials without your consent.
Getting an email from Firefox Monitor about a security incident can be alarming, but there are a few steps you can proactively take to protect your accounts and limit the damage:
*'''Read the details about the breach a resolve it in Firefox Monitor''': Read closely to learn what happened. What personal data of yours was included? Your next steps will depend on what information you need to protect. Visit [https://support.mozilla.org/en-US/kb/resolve-breaches-firefox-monitor Resolve breaches with Firefox Monitor] for more info.
*'''Change your passwords''': Lock down your account with a new password. If you can’t log in, contact the website to ask how you can recover or shut down the account. See an account you don’t recognize? The site may have changed names, or someone may have created an account using your email address.
*'''Use two-factor authentication''': Use two-factor authentication on all your online accounts to provide an extra layer of security.
*'''If you’ve used that password for other accounts, change those too''': Hackers may try to reuse your exposed password to get into other accounts. Create a different password for each website, especially for your financial accounts, email account, and other websites where you save personal information.
*'''Watch out for phishing scams''': Be wary of any unsolicited emails or text messages that ask for personal information or login details. Do not click on any links in these messages.
*'''Monitor your financial accounts''': Keep an eye on your bank and credit card statements for any suspicious activity. Report any unauthorized transactions to your bank immediately.
*'''Review your credit reports''': If you have a credit history in the US, check your credit reports for suspicious activity. Make sure that no new accounts, loans or credit cards have been opened in your name.
*'''Consider placing a fraud alert or a credit freeze on your credit report''': A fraud alert will let you know if someone tries to open a new account in your name. A credit freeze blocks many entities, such as creditors, from seeing your report. Locking down your credit report behind a freeze makes it more difficult for bad actors to open credit in your name.
*'''Keep a record of your actions''': Document the steps you've taken to protect yourself in case you need to prove to a financial institution or credit bureau that you have taken action.
*'''Contact the appropriate parties''': If the breach occurred at a business or organization, contact them and find out what they are doing to remedy the situation. Also, keep an eye out for updates and announcements from the organization that had the data breach, as they may provide important information on how to protect yourself.
At the end of the day, there is little any of us can personally do to stop data breaches. The longer you’ve lived online, the bigger your digital footprint, and with that comes greater security risks. However, there is plenty we can do to protect ourselves in anticipation of one, such as keeping all your software, devices and operating systems up to date, [https://monitor.firefox.com/security-tips#strong-passwords creating strong, unique passwords] from the start and using Two-factor authentication whenever it is available.