Data Breaches: How They Happen and What You Can Do
What this means
Data breaches sound technical, but the impact is personal. How they happen — and what you can do if you’re affected.
Note: This site may show light ads and occasional affiliate links. How that works.
A data breach is when someone who should not see it gets hold of sensitive information — names, emails, passwords, card details, or company records. It often leads to fraud, fake logins, or identity theft down the line.
You cannot stop every breach at source. You can make the fallout harder for whoever ends up with your details — and that is why unique passwords and mfa matter more after a leak than before one.
Common causes
- Weak or reused passwords
- Phishing — tricking someone into handing over login details
- Malware and unpatched software — known flaws left open
- Insider mistakes — accidental sharing or someone leaving with access still on
- Third-party supplier breaches — a service you use gets hit and your data goes with it
What helps before trouble
- Unique passwords and mfa on important accounts — especially email
- Updates on phones, laptops, and routers
- Limit who can see what — least access needed for the job
- Backups you have actually tried restoring from
If you hear your details were in a breach
Change the password on that account and anywhere you reused it. Turn on mfa. Watch for odd login alerts. Check haveibeenpwned.com if you want to see known leaks tied to your email.
A self-check
Do you use the same password on more than one site that matters — email, banking, shopping? Reuse is the quiet compromise; the breach email is only the day you find out. Change one reused password this week.
Related: Weak passwords · Online scams hub