Legal, Regulatory, and Privacy Issues

6 ways to protect your identity in a data breach


As data breaches become more prolific, it’s important to be more proactive in protecting yourself from identity theft.

The content on this page is accurate as of the posting date; however, some of our partner offers may have expired. Please review our list of best credit cards, or use our CardMatch™ tool to find cards matched to your needs.

There’s an old Chinese proverb that says whoever steals an egg will steal an ox.

Fast forward to the 21st century, replace “egg” with a credit card number and “ox” with your Social SecurityHow to protect your identity in a data breach number, and you’ve tapped into one of the biggest threats to the information age — identity theft.

Identity theft — the act of having your personal and financial information stolen from you, often by cyber-means — is a burgeoning problem.

  • According to an April 15, 2008, study of identity theft victims by the Poneman Institute, a Michigan-based research group, 55 percent suffered two or more information breaches in the past two years.
  • According to a February 2009 report by Javelin Strategy and Research, in 2008, the number of identity fraud victims grew 25 percent — affecting 9.9 million people. This is the first time since the report began in 2004 that the numbers have increased. In 2007, about 8.4 million people were victims of identity theft, one person every four seconds, which was down from more than 9 million the year before.
  • On Jan. 20, 2008, Heartland Payment Systems, a financial transactions company, announced a security breach that occurred in late 2008 that left tens of millions of credit cards vulnerable to cyber-fraud. Heartland doesn’t know yet how many accounts were breached, but it handles payment processing for 250,000 customers, 40 percent of which are restaurants. Heartland processes over 100 million transactions each month, according to company chief financial officer Robert Baldwin.

The good news is that taking action to stem ID theft is both easy and doable. asked some leading information security experts what steps to take to secure your personal identity and here is what they had to say:

1. Be aware: First, how do you know your identity has been breached? Bruce Cornelius, chief marketing officer at Canoga Park, Calif.-based, says you’ll know when you start getting letters and phone calls saying your application for credit has been approved or rejected. Or, you notice that your credit card statement has charges you never approved. Another red flag is getting phone calls from collection agencies saying you owe money.

2. Act fast: The key is to get out in front of the problem as soon as possible — before heavier damage can be done. “Oftentimes thieves will use your credit card data to commit nonfinancial identity theft crimes which become much larger problems,” says Justin Yurek, president of Denver-based “As thieves begin to truly clone your identity, they can move from buying items in your name to committing crimes in your name, or obtaining employment benefits in your name, or obtaining medical services in your name. Unlike a thief fraudulently purchasing products in your name, there is no easy reversal for these crimes, and the consequences to the victim are much more severe.”

As thieves begin to truly clone your identity, they can move from buying items in your name to committing crimes in your name…

–Justin Yurek

3. Prevention defense: ID theft specialists say that the real key in stopping identity breaches is in prevention. “To prevent identity theft, cardholders need to guard their cards and keep secret any identifying information about their accounts,” says Scott Crawford, CEO of “This includes shredding account statements and keeping account and personal information secret. Look through your statement carefully to identify transactions that you didn’t initiate and take advantage of alerts that your credit institution offers. Many allow you to get alerts for abnormal transactions that can warn you to potential fraud on your account.”

4. Check URLs: Always check a website’s URL and security certificate before entering in your personal information. “With phishing schemes becoming increasingly sophisticated, it is important to ensure that you are doing business with the person you think you are and not an impostor,” says Yurek. “Also, never send your personal information such as a Social Security number or credit card number in a nonsecure format such as an e-mail.”

Identity fraud victims chart5. Play it close to the vest:  Always keep your personal information as private as possible, and take concrete steps to eliminate your “financial footprint.” “Don’t give out your Social Security number unless it is absolutely necessary,” says Scott Stevenson, founder and CEO of Eliminate ID Theft.  “If you do not want credit offers to come to you, contact the three credit reporting agencies and ‘opt out’ of these offers. They should remove your name for two years from mailing and telemarketing lists. Don’t carry your Social Security card, passport or birth certificate in your wallet or purse and only carry the credit cards that you need.” Stevenson also advocates checking the “inquiry” section of your credit report to see if there are unsolicited creditors reviewing your credit that you haven’t done business with. Be careful about your mail habits, too. “Don’t mail bills or any documents like tax forms from your personal mailbox. Take them directly to the post office or pay them online. Thieves will rummage through your mailbox and take your valuable information.”

6. Contact the authorities: If you’ve been the victim of an identity theft crime, contact the police as soon as possible.’s Cornelius also advises to close all accounts you didn’t open and ones that were taken over. “Also use the Federal Trade Commission’s identity theft affidavit from the FTC website, to file a complaint that can be used to investigate identity theft,” adds Cornelius. “Then file a report with your local police department and in the community where the identity theft occurred. Get copies of this police report to help you prove to credit card companies and banks that your identity was stolen.”

One common denominator among all ID theft experts? Get ahead of the problem before it gets ahead of you. That way, both your egg and your ox are well protected.

See related:  Payment processor involved in massive security breach, Identity theft sample letters, Don’t take the bait when you receive a phishing e-mail, How to read, understand your credit report, 4 ways to opt out of credit card affiliate marketing

Editorial Disclaimer

The editorial content on this page is based solely on the objective assessment of our writers and is not driven by advertising dollars. It has not been provided or commissioned by the credit card issuers. However, we may receive compensation when you click on links to products from our partners.

What’s up next?

In Legal, Regulatory, and Privacy Issues

Don’t take the tax refund loan bait

The free-flying refund anticipation loans are gone, but new versions emerge

See more stories
Credit Card Rate Report
Cash Back

Questions or comments?

Contact us

Editorial corrections policies

Learn more