Last month, thousands of educational institutions worldwide were affected by the data breach with the learning platform provider, Canvas. While the company paid a ransom to the hackers to delete the stolen data, it serves as a reminder that data theft is a widespread criminal activity. 

It’s important to stay vigilant and take steps to prevent identity theft, but even the most cautious of us can fall victim to a data breach. To help out, we’ve put together an action plan on what to do if your information has been compromised. 

Step #1: Get clear on what information was stolen

The organisation that experienced a data breach should have contacted you and communicated exactly what information was exposed. If you are not sure, contact them directly. You can also use the Australian Cyber Security Centre’s So You Think You’ve Been Hacked tool. It’s also important to note that not every data breach is notifiable, so proactive monitoring, like using Equifax Identity Protect, can help alert you if your information is being traded on the dark web or if there’s suspicious activity on your social media accounts.

Step #2: Secure your accounts

Change your passwords, making sure to follow best practices like using a unique password for each site and considering the use of a password manager. Reset your passwords on all accounts. It’s worth checking if the online services you use allow you to check for devices that are logged in from the security settings, and logout any devices you don’t recognise.

Step #3: Secure your identity

If your identity has been stolen, you can reach out to IDCare, which is Australia and New Zealand’s identity support service. They can help you determine if your identity has been stolen, and guide you through next steps, including working through how to get new identity documents like driver licence, and how to get help from the Australian Tax Office if your TFN or business information has been stolen.

Step #4: Check your finances and other services

If your bank or other financial information has been compromised, contact the relevant institution for help putting a stop on your account and any steps you need to take to secure your account. You should also check if your identity details for other services, particularly online accounts, have been compromised or if someone is trying to set up fraudulent accounts in your name – Equifax’s credit and identity protection plans can help you monitor this and have alerts set up from as little as $9.95 a month. You can also access a free credit report here. 

Step #5: Stay alert to scams

Sadly, once your information is compromised, scammers have more information to make scams look convincing. Remember to check links, and only go directly to organisation websites to change passwords rather than clicking through email messages. For more tips, check out our 8 tips to stay ahead of online scammers. 

Step #6: Keep checking and monitoring

With identity theft a big business for criminal networks, we can’t afford to let our guard down as consumers. Equifax credit and identity protection plans can help keep you alert to suspicious changes, and you can also sign up for cyber threat notifications from the Australian Cyber Security Centre. 

Useful reading: Why Data Breach Could Make you an Identity Theft Target and How to Protect Yourself