My information was exposed. What should I do next?

An exposed email address and a stolen Social Security number are not the same case. They should not get the same remedy.

Start with one question: Has someone used the information, or do you only know it was exposed?

You may need more than one route. A breach can expose a password, a home address, and a Social Security number in the same untidy bundle.

Use IdentityTheft.gov when someone opened an account, made a charge, filed a claim, or used your identity without permission.

The Federal Trade Commission built the site to take an identity-theft report and create a personal recovery plan. That plan may cover closing false accounts, removing false charges, and fixing credit reports.

Also contact the company where the fraud happened. A government report starts the paper trail, but it does not cancel a card or close a false account for you.

A data-removal service cannot dispute a false loan or restore a stolen account. That clue belongs on the first page of the case file.

Secure the account first. Removing your address from broker sites will not stop someone who has a working password.

Change the exposed password. Change it anywhere else you reused it. Use a different password for every account, with a password manager if that makes the job easier.

Turn on multifactor authentication when the account offers it. Start with email, financial accounts, and social media because those accounts can open the door to others.

Then check the account for changes you did not make. Look at recovery email addresses, phone numbers, recent logins, sent messages, and linked apps.

If someone already took over the account or spent money, use Route 1 as well.

A credit freeze is the stronger block against new credit accounts. It stops access to your credit report until you lift it.

The FTC says a freeze is free, does not affect your credit score, and lasts until you lift it. You must contact Equifax, Experian, and TransUnion separately.

A fraud alert takes a lighter approach. It tells a lender to check your identity before opening new credit. It still allows the lender to view your report.

You contact only one credit bureau for an initial fraud alert. That bureau must tell the other two. The initial alert lasts one year and can be renewed.

You can use both. If you find a new account or other misuse, move to Route 1.

Contact the card issuer or bank through its official app, website, or the number on your card. Ask what it wants you to do next.

Review recent activity. Report a charge or transfer you did not make. Replace the card or account details when the institution tells you they are at risk.

A credit freeze protects against new credit. It does not block charges on a card that already exists. A broker opt-out does not do that either.

If the theft spreads beyond one payment account, report it through IdentityTheft.gov and follow Route 1.

Use data removal when people-search sites show details such as your home address, phone number, email, former names, or relatives.

Most people-search sites offer a free opt-out. You can file those requests yourself or pay a service to repeat the work across many sites.

Removal has a narrow job. It can make a public profile harder to find. It cannot secure an account, freeze credit, reverse fraud, or erase the public records behind a listing.

Start with the DIY data-broker removal checklist. It covers the free route and its limits.

Do not guess from the headline. Read the notice for the exact data fields, the date range, and the company contact path.

Ask three questions:

Keep the notice. Use only contact details from the company's known website or your existing account. A breach can attract fake calls and messages that borrow the company's name.

If the notice names several data types, run each one through this tree. Start with active fraud, account access, and credit identity. Public-listing cleanup comes later.

These tools are often stacked together as if they do the same thing. They do not.

Monitoring can tell you that something changed. It does not block the change. A freeze is the control that blocks new credit accounts.

A removal service may reduce public listings. It does not replace any of these actions:

Use removal for public exposure. Use security, credit, and recovery tools for the harm they were built to handle.

Should I buy a data-removal service after a breach?

Not as the first response. Secure accounts, protect credit, and report misuse first. Removal only helps with personal details that appear on public listing sites.

Is a fraud alert the same as a credit freeze?

No. An alert asks lenders to verify you. A freeze blocks new credit accounts until you lift it.

Does a freeze hurt my credit score?

No. The FTC says placing or lifting a freeze does not affect your score.

Do I need proof of identity theft to freeze my credit?

No. Anyone can place a freeze at any time. An extended fraud alert does require an FTC identity-theft report or a police report.

What if someone already opened an account in my name?

Contact the company, report the theft at IdentityTheft.gov, and follow its recovery plan. Check all three credit reports for other false accounts.