How to Check Whether Your Email Has Been Part of a Data Breach

Photo source: openverse, Brett Jordan

Hearing that a company you deal with has suffered a data breach can be unsettling, especially when so many everyday tasks now happen online. The good news is that checking whether your email address has been caught up in a data breach is simple, free and needs no technical skill.

What is a data breach?

A data breach happens when someone gains access to information held by a business or organisation without permission. This might include email addresses, passwords, names or phone numbers. Even large, well-known companies have been affected, so appearing in a breach does not mean you did anything wrong.

Use a free breach checking website

One of the most trusted tools is Have I Been Pwned, found at haveibeenpwned.com. It was created by a respected security researcher and is used around the world. Type your email address into the search box and press the button. The site will tell you whether your address appears in any known data breach and which companies were involved. Always type the web address in yourself rather than clicking a link in an email or text message, as scammers often copy genuine websites.

What to do if your email appears

Try not to panic. Start by changing the password on the affected account and on any other account where you used the same password. A long password made of three or four unrelated words is easier to remember and harder to guess. If the service offers two-step verification, switch it on. This sends a code to your phone as an extra check. Keep an eye on your bank and credit card statements, and contact your bank if you notice anything unfamiliar.

Stay alert for scams

After a data breach, criminals sometimes send convincing emails or texts pretending to be your bank, a courier or a government agency. Never share passwords or codes with anyone who contacts you unexpectedly. If something feels wrong, delete the message or hang up, then contact the organisation directly using a phone number from their official website.

Where to get help in New Zealand

Netsafe offers free advice on online safety and can be reached on 0508 638 723. The National Cyber Security Centre also accepts reports about scams and cyber incidents. Family members, local libraries and community groups such as SeniorNet can also help you check your accounts and update your passwords.

A simple habit worth keeping

Checking for a data breach every few months is a healthy habit, much like locking your front door. A few minutes of care can protect your money, your identity and your peace of mind.