What To Do After a Data Breach

How to know if your data has been exposed

Thousands of websites suffer from data breaches every year, including major platforms like X (Twitter), Adobe, Dropbox, and many more. Your data may be among those breaches, and unless you check, you may never know that it was exposed until a hacker tries to steal your accounts. Luckily, there are services that can help.

Reputable websites like "Have I Been Pwned" will check if your email or username has been compromised across the web. Some monitoring services – such as Credit Karma – while also check your data against your credit report and notify you of suspicious activity as well as data breaches.

Finally, if you know a specific organization was affected, check for notifications from them for account safety instructions.

Immediate actions to take

Once you’ve confirmed your data was in a breach, here’s what you should do:

Change passwords: Immediately change the passwords for the affected accounts. A strong password is at least 12 characters long and includes a mix of upper and lowercase letters, numbers, and symbols, or even a pass phrase comprised of multiple words that is easy for you to remember. You might also consider using a password manager to keep track of your credentials.

Enable Two-Factor Authentication (2FA): 2FA adds an extra layer of security by requiring you to enter a code from your phone or email in addition to your password when logging in.

In Hills Bank Online, two-factor authentication is handled automatically. We will require a 2FA code under certain circumstances. Make sure you can receive codes in case you need them by checking your contact information in Hills Bank Online: Settings -> Security Preferences -> Secure Delivery.

Monitor your financial statements: Keep a close eye on your bank and credit card statements for any unauthorized transactions. If you spot any, report them to your bank or credit card company immediately. You can get in touch with us via the chat button on the bottom of this page, or by calling 1-800-445-5725 (1-800-HILLSBK).

Freeze or monitor your credit: Consider freezing your credit reports (which prevents new accounts from being opened) or enrolling in a credit monitoring service to be alerted to any suspicious activity related to your credit.

Protecting your data in the future

Once you’ve secured your data now, consider this advice for future breaches:

Use strong passwords: Always use complex, unique passwords that are at least 12 characters long for online accounts. Consider using a pass phrase, a combination of upper and lower case letters, numbers, and symbols.

Regularly update software: Keep your PC operating system, smartphone software, and apps up-to-date to patch security vulnerabilities that hackers might exploit.

Beware of phishing emails: Be cautious when opening emails or clicking on links. Cybercriminals often use phishing emails to trick you into revealing sensitive information.

Regularly back up your data: Backup important data to an external drive or a secure cloud storage service. This will help you recover your information in case of ransomware attacks or data loss.

Resources

If you find yourself overwhelmed or believe that the data breach may lead to identity theft, here’s who you should contact:

Get in touch with us: Use the chat button on the bottom of this page or call at 1-800-445-5725 (1-800-HILLSBK) and let us know you think your personal information may be compromised.

Credit agencies: The three credit reporting bureaus – Equifax, Experian, and TransUnion – can place a fraud alert or freeze your credit reports.

Other resources include:

• Identity Theft Resource Center (ITRC): The ITRC offers free assistance for victims of identity theft, including personalized recovery plans. 
• Cybersecurity Experts and Legal Counsel: In severe cases, consider consulting a cybersecurity professional and legal counsel to navigate the aftermath of a data breach.