Data breach: what to do if your password was leaked
Short answer: If your password ended up in a leaked database, act at once: change it to a unique, strong password on the affected service and everywhere it was reused, enable 2FA, disconnect unknown sessions and stay alert to targeted phishing. You can check whether you are affected using a reputable breach-checking service.
A data breach happens when a website’s or service’s data (emails, passwords, personal information) falls into the wrong hands. Such breaches occur regularly even at large companies, so sooner or later they touch almost everyone. What matters most is not the fear itself, but the ability to react quickly and reduce the damage.
Why a breach is dangerous
When a password ends up in a leaked database, attackers automatically try it elsewhere — a bank, a work email, systems. If you use the same password in several places, one breach opens all of them at once. Also, leaked emails are used for targeted phishing, because scammers already know where and how to reach you.
How to know whether you are affected
- Check your email in a reputable breach-checking service.
- Watch for service notifications about a security incident and password-reset prompts.
- Be suspicious of unexpected login-attempt or 2FA-code notifications.
- Watch for unusual activity in accounts and payments.
What to do immediately
- Change the affected service’s password to a unique, strong one.
- Change it everywhere you used the same or a similar password.
- Enable 2FA on affected and important accounts.
- Review active sessions and disconnect any unfamiliar ones.
- Stay alert to targeted phishing in the near future.
If a work email or password leaked — inform IT immediately. One leaked employee login can become an entry point into the whole company.
How to reduce breach damage in advance
- A unique password for every account, so one leak does not affect the others.
- A password manager that warns about passwords found in breaches.
- 2FA enabled everywhere that matters.
- Less publicly available information that could be used for targeted scams.
What the business should do
For a business it matters not only to respond to its own incident, but to understand that leaked employee data often turns into targeted phishing. So after larger breaches it is worth reminding the team to stay alert and strengthening training. Opsinel helps maintain this alertness continuously — with regular simulations and a lesson right after a mistake, so a leaked password does not become a successful attack.
Try it yourself
Could you spot a phishing email?
10 realistic emails and an explanation after each answer. About 5 minutes, no sign-up.
Take the phishing quizCan scammers send email in your name?
A free SPF, DKIM and DMARC check of your domain. The domains you enter are not stored.
Frequently asked questions
How do I check whether my email leaked?
Use a reputable breach-checking service that shows which known incidents your email appeared in, and change passwords accordingly.
A password leaked — is changing just it enough?
Change it on that service and everywhere you used the same or a similar password. Additionally, enable 2FA so future leaks cause no harm.
Can breaches be avoided completely?
No, because they also depend on third parties. But unique passwords and 2FA ensure that even a leaked password gives an attacker very little.
How do I know my data has leaked?
Signs: a service notification about an incident, unexpected login-attempt or 2FA-code notifications, unusual account activity. You can also check your email in a breach-checking service.
Is a leaked email address already dangerous?
The address alone without a password does no critical harm, but it is used for targeted phishing. So after a breach it is worth being more alert to suspicious emails and messages.
Sources and further reading
Public guidance from security agencies and standards bodies.
- NCSC (UK)Data breach guidance for individuals
- Have I Been PwnedCheck whether your email address appears in a data breach