First Hour · First Day · First Week · Recovery
| Data | Risk Level | Primary Threat |
|---|---|---|
| Email + Password | High | Account takeover (all sites with same password) |
| Credit Card | Medium | Fraudulent charges (usually covered by bank) |
| SSN | Critical | Identity theft, fraudulent accounts, tax fraud |
| Phone Number | Medium | SIM swapping, phishing calls/texts |
| Address | Low-Med | Physical mail fraud, doxing |
| Action | Priority |
|---|---|
| Use unique passwords everywhere | Critical |
| Enable 2FA on all accounts | Critical |
| Freeze credit at all 3 bureaus | High |
| Monitor breaches (haveibeenpwned.com) | High |
| Use password manager | Critical |
| Review accounts quarterly | Medium |
| Resource | Purpose |
|---|---|
| haveibeenpwned.com | Check if your email was in a breach |
| annualcreditreport.com | Free credit reports (US) |
| identitytheft.gov | FTC identity theft recovery plan |
| Credit freeze (Equifax/Experian/TransUnion) | Prevent new accounts in your name |