NEW

The “Zombie” SaaS Audit: Finding the 3 Apps Your Former Employees Still Access

Someone leaves the company on a Friday. By Monday, their email account is disabled, and their laptop is back in the pile.What nobody checks is their login to the project management tool they signed up for in Q3, the cloud storage folder they shared with a contractor,...

Stop the Bleeding: How Revoking Admin Rights Eliminates Support Tickets

The most time-consuming ticket in your queue is rarely a hardware failure. It’s the PC infection that started when a user installed something they shouldn’t have been able to. Or it’s the broken configuration left behind after someone changed a setting IT can’t...

Is Your Invoice a Deepfake? Securing Your Accounts Payable Process Against Voice and Email Cloning

It’s a statistic that sends a shiver down the backs of SME owners, managers and employees.  According to the FBI's 2025 Internet Crime Report, business email compromise (BEC) cost US businesses more than $3 billion last year.This makes it one of the most financially...

Adversary-in-the-Middle Attacks: How Phishing Sites Steal Your Active Login

You click a link, sign in, approve the MFA prompt, and get on with your day. Completely unaware that someone else just logged into your account at the same moment.That scenario surprises many businesses, particularly those that rely on multi-factor authentication...

The “Session Cookie” Hijack: Why MFA Can’t Always Save You

MFA is a strong front-door lock. But it’s not the only thing that decides whether someone can get in.After you sign in, your browser keeps you logged in using a session token (often stored as a cookie). It’s the digital version of a wristband at an event: once you’ve...

The “Legacy Debt” Audit: Identifying the 3 Oldest Risks in Your Server Room

The most dangerous thing in a server room is often the phrase, “Don’t touch that.”It’s usually said with a half-joke and a grimace. It refers to the old box that “still works”, runs something important, and has survived so many fixes and workarounds that nobody feels...

The “Backup Exit” Strategy: Can You Move Your Data Without the Vendor’s Help?

When you first sign up for a software-as-a-service (SaaS) platform, everything is designed to feel effortless. The problem is that the first real test of a SaaS relationship isn’t the onboarding. It’s the exit. For many small businesses, the front door is wide open,...

Micro-SaaS Vetting: The 5-Minute Security Check for Browser Add-ons

Browser add-ons have a funny reputation. They feel “small”. A quick install. A tiny productivity boost. A harmless little helper that lives in your toolbar.But in practice, a browser extension is more like a micro-SaaS vendor sitting inside your browser session. It...

LinkedIn “Social Engineering”: Protecting Your Staff from Fake Recruitment Scams

A fake recruiter message is one of the cleanest social engineering tricks around because it doesn’t look like a trick.That’s why LinkedIn recruitment scams work so well inside real businesses. They don’t arrive as malware. They arrive as a normal conversation that...

“Clean Desk” 2.0: Securing Your Home Office from Physical Data Leaks

In the traditional office, a “Clean Desk” policy was a simple habit: shred the sensitive stuff, lock it away, and don’t leave passwords where someone can see them.In 2026, the same idea still matters but the “desk” has changed. For many teams, the home office is now...

When it happens, you feel powerless. You get an email or letter from a business saying someone breached your data. It happens all too often today.

Data breaches happen at banks, online sites like Facebook, and ecommerce stores. Not only that, but governments are also victims. This leaves things like your address, SSN, and credit card details exposed to thieves. 

A business getting hacked is something you have little control over. But you can take important steps afterwards. We’ve outlined the most important things to do below. These steps can help you mitigate the financial losses.

Change Your Passwords

The very first thing you should do is change your passwords. Change the password for the service that sent you the breach notification first. Then, change it for any logins using the same password. 

This is one of the reasons it’s a best practice to use unique logins for every site. Many people get in the habit of using the same password in several places. This leaves more than the single breached login at risk. Use a password manager to help you create strong passwords. You only need to remember one to access all the others.

Enable Multifactor Authentication (MFA)

Multifactor authentication can keep accounts secure, even if a hacker stole the password. Enable it for the breached service. Then, ensure you have MFA activated for all other logins, where possible. MFA is also called two-factor authentication or two-step verification.

Common forms of MFA are:

  • Text message
  • Authentication app
  • Security key

Check Your Bank Accounts

If payment card details were breached, check bank accounts. You’ll want to watch these for several weeks for fraudulent charges. Report the breach to your bank to have them issue you a new card, if needed.

Notify your bank about the 3rd party data breach. This can help keep you from being held responsible for fraudulent charges. It’s good to get out ahead of it. Your bank can then help you with appropriate steps to avoid fraud.

Freeze Your Credit

Online criminals will often sell breached personal details. These details can enable someone to take out credit in your name. Contact the three credit agencies. They each have ways to freeze your credit to protect you. You can do this right on their websites.

The three credit agencies are: 

Carefully Review the Breach Notification

It’s important to understand exactly how the data breach may impact you. Review the notice you received. Additionally, look for updates on the company website.

These are the things you should be looking for:

  • The type of data exposed (passwords, card numbers, etc.)
  • What reparations the company is making (e.g., credit monitoring)
  • Any instructions given to secure your account

Regularly check the company’s website. Often, they don’t immediately know how far reaching the breach is. You may check back later and find out other types of sensitive data were exposed.

Get Good Cybersecurity Protections

Make sure you protect your device and network. There are some simple tools you can use to beef up personal device security. These include:

  • A good antivirus/anti-malware program
  • DNS filtering to block malicious sites
  • Email spam filtering for phishing

Another good protection you can use is a VPN. This helps mask your traffic. It is especially helpful if you’re using a public Wi-Fi. VPNs are easy to use. You can use VPNs for both computers and mobile devices.

Be On the Lookout for Phishing Scams

Emails are often exposed in data breaches. This means you may receive an uptick in phishing emails. Phishing is very convincing since criminals have AI at their disposal. Phishing emails often are hard to spot from the real thing.

Stay ultra-aware of any unexpected emails. Follow best practices to avoid becoming a phishing victim:

  • Hover over links to see them
  • Go to websites directly. Don’t click email or SMS links
  • Beware of unknown senders
  • Watch for phishing on social media and text messages
  • When in doubt, double check through an official source

Make Sure to Update Software & Systems

Hackers often exploit unpatched vulnerabilities. How do you get unpatched vulnerabilities? Most times it’s from failing to keep software updated.

Make sure to update your device operating system. Update all apps or software on your devices. Update firmware for routers and printers. Update firmware for smart devices. 

There are so many updates we need to do with our electronics. Automating your updates is a good way to stay protected.

Managed Security Services You Can Count On

Managed services can keep you protected at work and home. Need help improving device security? We’ll be happy to discuss our options.

Contact us today to schedule a chat about device security.

Featured Image Credit

This Article has been Republished with Permission from The Technology Press.