What to do if Your Personal Information is Breached

Even if your financial or medical information isn't stolen, some personal information can still be used by bad actors

Federal and state laws define certain kinds of information as protected personal information (PPI) and require businesses and government agencies to keep it private. But there are all kinds of other information that you might not want public, or that could be used against you by a scammer, con artist, internet troll, or someone who's simply being unkind.

Businesses such as app makers or social media companies aren't obligated to notify you if non-protected information is stolen, and anything that exists in digital form can be breached. So the best way to protect yourself is to be wary about what you share and with whom. Here are four key tips to consider:

• When you download an app, check the privacy policy to find out what kind of information the seller may gather and share. Use privacy settings to minimize what they collect and track, from your usage habits to your location.

  • Pro Tip: Tools like Terms of Service, Didn’t Read rate corporate ToS policies to help you make informed decisions before checking the “I have read and agree to the Terms” box.

• Don't post information on social media that you wouldn't want public. Privacy settings can’t do much about screen captures so assume if you put it out there, it can be shared with anyone. We tell kids to ask themselves, "What would your grandmother say?" That's not bad advice for adults, either.

• Always be on alert for social engineering attempts (aka, phishing or smishing). Scammers will use stolen information about your shopping habits, travel preferences, club memberships, medical conditions, or internet search history to try to rob you or trick you out of personal information.

• If anyone tries to coerce you using personal information, contact law enforcement immediately. You can start by contacting your local police or report the issue to the FBI’s Internet Crime Complaint Center.