Skip to content
Emergency

Data leaked? What to do immediately after a data breach

You learned that your email address, passwords or other data were captured in a data breach? Do not panic, but now fast, correct action counts so the leak does not turn into damage.

Reach your next steps and the matching ready-made texts in just a few minutes, free of charge:

Check a suspicious message →

Your chances of getting your money back

Leaked login data is misused for 'credential stuffing': criminals automatically try your password on many services. If you reuse it, several accounts are at risk.
In a company's data breach you may under certain circumstances be entitled to damages (Art. 82 DSGVO), but above all it is now about protecting your accounts.

What you should do now

  1. 1

    1. Change your most important passwords immediately

    First change the password of your email account (it is the master key), then online banking and all services where you used the same password.

  2. 2

    2. Unique passwords everywhere plus 2FA

    Use a separate, long password for each service (a password manager helps) and activate two-factor login wherever possible.

  3. 3

    3. Monitor your accounts

    Watch for unusual logins, emails about password changes and debits. Check whether your address appears in known leaks.

  4. 4

    4. Be prepared for follow-up fraud

    After a leak, phishing emails and calls with real data pile up. Stay suspicious and check suspicious messages.

How to spot the scam

  • Emails about logins or password changes that you did not initiate.
  • Phishing messages that name real data of yours.
  • Calls from a supposed 'support' team shortly after the leak.

Frequently asked questions

Do I really have to change all my passwords?

At least that of the affected service and everywhere you used the same or a similar password. The safest is to generally switch to unique passwords per service and activate two-factor login.

Do I get damages?

In a breach by the responsible company, a claim under Art. 82 DSGVO can exist. Whether and how much depends on the individual case. More important first is to secure your accounts.

Take action now

We put together the ready-made texts and the right places to contact for you.

Check a suspicious messageCheck a suspicious message
More help: Emergency by phone · Act together · Right to a lawyer · All guides

General information for self-help, not legal advice (RDG). In case of a high loss or uncertainty: contact a consumer advice center or a lawyer.