What to Do If Your Social Security Number Is Leaked

Your Social Security number is the single most valuable piece of information an identity thief can obtain. Unlike a password or credit card number, you cannot simply change your SSN -- it follows you for life. If your Social Security number has been exposed in a data breach, leaked on the dark web, or stolen through a scam, you need to act immediately. Every hour of delay gives criminals more time to open accounts, file fraudulent tax returns, or take out loans in your name. Here is exactly what to do, step by step.

Step 1: Freeze Your Credit at All Three Bureaus

A credit freeze is the most important step you can take. It restricts access to your credit report, which means no one -- including you -- can open new credit accounts until the freeze is lifted. This stops identity thieves from taking out credit cards, loans, or mortgages in your name, even if they have your SSN.

You must freeze your credit at each bureau separately. It is free and takes about five minutes per bureau:

• Equifax: Visit equifax.com or call (888) 298-0045
• Experian: Visit experian.com or call (888) 397-3742
• TransUnion: Visit transunion.com or call (800) 916-8800

A freeze does not affect your credit score, your existing accounts, or your ability to check your own credit report. When you need to apply for credit, you can temporarily lift the freeze at the specific bureau the lender uses.

Also Consider a Fraud Alert

If you are not ready to freeze your credit, a fraud alert is a less restrictive alternative. It requires creditors to take extra steps to verify your identity before approving new accounts. You only need to contact one bureau -- they are required to notify the other two:

• An initial fraud alert lasts one year and is available to anyone
• An extended fraud alert lasts seven years and is available to confirmed identity theft victims who have filed an FTC report

For maximum protection, place both a credit freeze and a fraud alert.

Step 2: Report to the FTC

File a report with the Federal Trade Commission at IdentityTheft.gov. This is the official government resource for identity theft victims. The site will walk you through creating a personalized recovery plan and generate an official Identity Theft Report that you can use with creditors, banks, and law enforcement.

You can also report by phone at 1-877-IDTHEFT (1-877-438-4338).

Your FTC report serves as documentation that the theft occurred, which is essential for disputing fraudulent accounts, obtaining an extended fraud alert, and filing insurance claims.

Step 3: File a Police Report

Contact your local police department and file a report about the SSN exposure. While local police may not investigate the identity theft directly, a police report provides additional official documentation that strengthens your case when dealing with creditors, banks, and government agencies. Some financial institutions specifically require a police report before they will reverse fraudulent charges.

Step 4: Protect Yourself from Tax Fraud

Tax-related identity theft is one of the most common uses of a stolen SSN. Criminals file fraudulent tax returns early in the season using your SSN to claim your refund before you do.

Take these additional steps to protect your tax account:

• File IRS Form 14039 (Identity Theft Affidavit) to alert the IRS that your SSN has been compromised and that any return filed with it should be scrutinized
• Request an IRS Identity Protection PIN (IP PIN) at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin -- this six-digit number is required on your tax return each year and prevents anyone else from filing with your SSN
• Contact the IRS Identity Theft Central at 1-800-908-4490 if you believe a fraudulent return has already been filed using your SSN

Step 5: Check Your Social Security Account

Create an account or log in at ssa.gov (my Social Security) to review your earnings record and check for suspicious activity. Look for:

• Unfamiliar employers listed in your earnings history -- this could mean someone is working under your SSN
• Incorrect earnings amounts that do not match your actual income
• Benefits being claimed that you did not apply for

If you find discrepancies, contact the Social Security Administration immediately at 1-800-772-1213. If someone else has already created an account using your SSN, report it to the SSA's Office of the Inspector General.

Step 6: Monitor Your Credit Reports

After securing your credit with freezes and fraud alerts, begin actively monitoring your credit reports for any signs of fraudulent activity:

• Check all three credit reports at annualcreditreport.com -- you are entitled to free weekly reports from Equifax, Experian, and TransUnion
• Look for unfamiliar accounts -- credit cards, loans, or lines of credit you did not open
• Check for hard inquiries you did not authorize, which may indicate someone attempted to open credit in your name
• Review personal information on file -- incorrect addresses, phone numbers, or employer names can indicate identity theft

Set a recurring reminder to check your reports monthly for at least the first year after your SSN was exposed. Identity thieves sometimes wait months before using stolen information.

Step 7: Sign Up for Dark Web Monitoring

Once your SSN reaches the dark web, it can be bought and sold repeatedly by different criminals. Dark web monitoring services scan underground marketplaces, forums, and data dumps for your personal information and alert you when it appears.

This is especially important because SSN exposure is permanent -- unlike a password, you cannot change your Social Security number. Ongoing monitoring ensures you are notified each time your information surfaces in a new context so you can take action before it is used against you.

What to Do If Fraudulent Accounts Have Already Been Opened

If you discover that someone has already used your SSN to open accounts or make charges:

1. Contact each creditor directly and explain that the account is fraudulent. Request that the account be closed and that you receive written confirmation
2. File a dispute with the credit bureaus to have fraudulent accounts and inquiries removed from your credit report
3. Submit your FTC Identity Theft Report and police report as documentation to support your disputes
4. Keep detailed records of every call, letter, and interaction -- note dates, names of representatives, and reference numbers
5. Follow up in writing. Send dispute letters via certified mail with return receipt requested so you have proof of delivery

How PrivacyOn Protects You After an SSN Leak

When your Social Security number is compromised, the ripple effects spread far beyond your credit report. Data brokers and people search sites may already have your SSN linked to your name, address, phone number, and family members -- creating a comprehensive profile that makes identity theft even easier.

PrivacyOn helps limit the damage and reduce your ongoing risk:

• Removes your personal information from 100+ data broker sites that piece together and sell your identity details
• Provides dark web monitoring to alert you every time your SSN or other personal data appears on underground sites
• Monitors 24/7 for re-listings because data brokers continuously re-collect and republish personal information

A credit freeze stops new accounts from being opened, but it does not stop your personal data from being collected and sold. Combining a credit freeze with PrivacyOn's data removal service gives you the strongest possible defense -- blocking both the financial exploitation and the data broker exposure that make SSN theft so dangerous.