Scam Stopper logo

SCAM STOPPER: Attorney General Ellison shares steps to take following a data breach

October 29, 2024 (SAINT PAUL) — Today, Attorney General Keith Ellison shared practical guidance about responding if your information is exposed in a data breach. The warning is part of the Attorney General’s monthly Scam Stopper series, aiming to help protect Minnesota consumers from common scams.

"Data breaches are becoming an unfortunately common occurrence in our highly connected world,” said Attorney General Ellison. “While my Office works hard to hold companies accountable when their security failures expose Minnesotans’ private information, that cannot undo the harm caused by a data breach. As such, it is important for Minnesotans whose information is exposed to take some early steps to mitigate that harm, protect themselves, and make things harder for scammers and thieves.”

How the Scams Work

Data breaches can lead to a wide variety of scams. Information that’s stolen in a breach can include usernames, passwords, email addresses, phone numbers and addresses, dates of birth, credit and debit card numbers, social security numbers, and much more. Frequently, thieves target victims with good credit and use their personal information to open a wide variety of new accounts, including credit cards, utility accounts, checking accounts, and more. The thieves skip out on the bills, and creditors unknowingly pursue the victims and destroy their credit in the process.

Other bad actors may use information they collect in what's called phishing - a form of scam where the scammer pretends to be someone else to trick their victim. Scammers may pretend to be from the breached organization to steal more information by, for example, asking people to confirm account numbers or other personal financial data to “check for fraud.”

What To Do If Your Data Is Exposed

If you learn that your private information was released as the result of a data breach, here are some reasonable steps to take to protect yourself.

Change your passwords and switch to two-factor authentication

It is important to change your passwords if your data is breached, especially on online banking platforms, commerce platforms like Amazon and Etsy, and communications platforms like your email account and Facebook. This is particularly important if you have used the same password in multiple places, which is less secure than using a separate password for every platform.

It is also a good idea to set up two-factor authentication, which requires an additional layer of security to sign into a website or app. For example, a two-factor authentication system may require a password and for you to enter a code delivered by call, email, or text message.

Call the three major credit bureaus and place a one-call fraud alert on your credit report

You only need to call one of the three credit bureaus. The one you contact is required to contact the other two to place the fraud alert in your credit file. This fraud alert will remain in your credit file for at least one year. The fraud alert requires creditors to contact you before opening any new accounts or increasing credit limits on your existing accounts. When you place a fraud alert on your credit report, you are entitled to one free credit report from each of the three credit bureaus upon request.

Consider placing a security freeze on your credit reports

Under state law, Minnesota consumers can place a security freeze on their credit reports. In most instances, the freeze prohibits a credit reporting agency from releasing any information from your credit report without your written authorization. (Before placing a security freeze on your credit report, consider that a freeze could delay, interfere with, or prevent the timely approval of any requests you make for new loans, mortgages, employment, housing or other lines of credit).

You can place a security freeze on your credit report for free, and a parent or guardian may freeze the credit report of a child under the age of 16 at no cost as well.

Visit the following websites to place a security freeze on your credit report:

Monitor your financial accounts for suspicious activity

Look carefully for unexplained activity on your bank and other financial statements. If after reviewing your statements you believe there is unexplained activity, you may want to contact the fraud department of your financial institution.

Beware of phishing

In large data breaches, scammers may pretend to be the organization that was subject to the data breach, or even a law enforcement agency, in order to dupe consumers into disclosing sensitive personal information. When in doubt, don’t give it out. Contact companies through trusted channels. If you are concerned about receiving such an email, call the company immediately at the publicly listed phone number. Don’t trust the number or email in the message.

Contact the Federal Trade Commission

The Federal Trade Commission (FTC) maintains an Identity Theft database, monitors identity theft nationwide, educates consumers on the crime, and works with other law enforcement officials. Consumers may contact the FTC as follows:

Federal Trade Commission
Bureau of Consumer Protection
(877) 382-4357
www.consumer.ftc.gov

When a Scam Happens to You

Attorney General Ellison asks that Minnesotans report scams to his office immediately. Many people feel embarrassed when a scam happens to them, but the truth is that con artists and scammers are often professionals with years of experience. They are good at what they do, and they count on people feeling too embarrassed to protect others by speaking out. If a scam happens to you, please report it right away: not only may the Attorney General’s Office be able to help you personally, you will help others by allowing us to alert others.

Reporting a Scam

If you believe you are the target of a scam, file a complaint with the Office of Attorney General Keith Ellison online. You can also contact the Attorney General’s Office by calling (651) 296-3353 or (800) 657-3787.  

For more information, see this publication from the Attorney General’s Office on mortgage assistance scams.