Whether you have watched the news or scrolled through social media recently, you have seen stories of companies experiencing data breaches. A data breach is a serious cybersecurity security event that occurs when an unauthorized party gains access to private and sensitive information, including personal and corporate data. Data breaches may involve bank account numbers, credit card data, social security numbers, and even the intellectual property and trade secrets of corporations. In 2023, over 353 million people were affected by data comprises, including breaches, leakage, and exposure (Identity Theft Resource Center). Keep reading to learn more about data breaches and what to do if your data is involved in a date breach. 

• How does a data breach happen? 

The most common type of data breach is a cyberattack. A cyberattack occurs when threat actors (an individual or group that causes harm to digital system or devices) exploit weaknesses in technology designed to safeguard sensitive information. Some of the most common types of cyberattacks are malware, ransomware, credential stuffing, and DNS (Domain Name System) tunneling. Credential stuffing is when a threat actor uses leaked username and password logins on other sites because people tend to use the same login credentials on multiple websites. Meanwhile, DNS tunneling involves the hacker connecting a victim’s computer to the hacker's device through cyberspace and they typically won’t even know they have been hacked.  

• How do I know if my information was involved in a data breach? 

There are a few steps you can take to see if your data was compromised. First, monitor your accounts to see if you received any information regarding data breaches from the host of your account. However, exercise caution, as hackers often employ this method as a phishing tactic. Guarantee that the communication originates from a verified and legitimate email address. Another step you can take is visiting the website in question that may have experienced a data breach and see if they have a page or contact information for breach inquiries. Lastly, keep an eye on your personal accounts for any suspicious activity. 

• What do I do if my data was breached? 

If your data was breached, you must act immediately. Change your passwords that you suspect have been breached, and then add two-factor authentication to each account to add an extra layer of protection. Then, notify affected institutions, like your bank and credit bureau, that sensitive information including your credit card or social security numbers were involved in the breach and inquire about additional security measures. If the breach involves significant financial or personal information, consider consulting with professionals such as identity theft protection services or legal advisors. Don’t forget to install antivirus or anti-malware software to run a full system scan to detect any threats.  

Data breaches and cyberattacks are some of the most common ways that cybercriminals can access your information. If you suspect you’ve received phishing attempts, report them to FSU cybersecurity. 

References 

Number of data breaches and victims U.S. 2023 | Statista