My SSN Was Stolen in a Data Breach: What to Do Right Now

Data breaches in 2026 have exposed more Social Security numbers than any prior year on record. Between Stryker, Navia Benefit Solutions, Marquis, and several other major incidents in March 2026 alone, tens of millions of SSNs are circulating in criminal marketplaces right now. If you've received a breach notification — or suspect your SSN may be in the wrong hands — this guide tells you exactly what to do and in what order.

Step 1: Freeze Your Credit at All Three Bureaus — Right Now

A credit freeze (also called a security freeze) is the single most powerful thing you can do when your SSN is compromised. It prevents any lender from accessing your credit report, which means no one can open a new credit card, loan, or line of credit in your name — even if they have your SSN, date of birth, and address.

Credit freezes are free, immediate, and do not affect your existing accounts or credit score. You must place them separately with each of the three major bureaus:

Once your freeze is in place, save the PIN or confirmation code each bureau provides. You'll need it to temporarily lift the freeze when you apply for legitimate credit.

Step 2: Place a Fraud Alert

A fraud alert tells lenders to take extra steps to verify your identity before opening new credit. It's free and placing it with one bureau automatically notifies the other two. You can place a standard 1-year fraud alert or an extended 7-year fraud alert (for confirmed identity theft victims).

Visit any of the three bureau websites above or call their fraud lines directly. A fraud alert is not as strong as a credit freeze — lenders can still pull your credit with one — but it adds a verification layer on top of any freeze you've placed.

Step 3: Report to IdentityTheft.gov

The FTC's IdentityTheft.gov is the official US government resource for identity theft victims. When you report there, you receive a personalized recovery plan specific to your situation — including step-by-step instructions, pre-filled letters for creditors and bureaus, and documentation that may help you prove your case if fraudulent accounts are opened in your name. The process takes about 15 minutes and creates an official FTC Identity Theft Report.

Step 4: Review Your Credit Reports for Unauthorized Accounts

Visit AnnualCreditReport.com to pull your free reports from all three bureaus. Look for:

• Accounts you don't recognize
• Inquiries (hard pulls) you didn't initiate
• Addresses or employers you've never used
• Negative marks on accounts you didn't open

If you find fraudulent accounts, dispute them with the bureau in writing and request a block of the fraudulent information. The FTC Identity Theft Report you created in Step 3 supports these disputes and typically speeds up resolution significantly.

Step 5: Protect Your Social Security Account

Go to ssa.gov and create or log into your my Social Security account. From there:

• Verify your earnings record — fraudsters sometimes use stolen SSNs to work under your number, which affects your future benefits
• Set up a mySSA account if you don't have one, which makes it harder for someone to create a fraudulent account in your name
• Consider placing a self-lock on your SSN through E-Verify (myE-Verify.uscis.gov) to prevent employers from hiring someone using your number

Step 6: Watch for Tax Identity Theft

Tax identity theft — where someone files a tax return using your SSN and steals your refund — is one of the most common uses of a stolen SSN. Signs include:

• IRS notice that more than one return was filed under your SSN
• IRS notice that you have wages from an employer you've never worked for
• Your tax return being rejected as a duplicate

The IRS Identity Protection PIN (IP PIN) program allows you to get a 6-digit pin that must be included on your tax return — without it, no return can be processed using your SSN. Enroll at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.

Step 7: Set Up Ongoing Dark Web Monitoring

A credit freeze protects your credit. A fraud alert adds a verification layer. But neither one tells you if your SSN is actively circulating in criminal marketplaces. For that, you need dark web monitoring that continuously scans breach databases, hacker forums, and data markets for your personal information.

This is where ongoing identity protection services like Aura become particularly valuable after a breach. Once your SSN is compromised, it can surface in multiple breach datasets over months or years — as hackers sell and resell stolen data. Continuous monitoring gives you visibility into ongoing exposure that a one-time credit freeze doesn't provide.

We may earn a commission if you purchase through links on this page. Full disclosure.

What the March 2026 Breaches Mean for You

March 2026 has been one of the worst months for data breaches in recent history. Several high-profile incidents have put millions of SSNs at risk:

• Stryker Corporation (March 11, 2026): A cyberattack by Iranian-linked hackers reportedly extracted ~50 terabytes of data including SSNs, health information, dates of birth, and employment records of current and former employees and consumers. A class action lawsuit was filed March 13.
• Navia Benefit Solutions: 2.7 million people affected, with SSNs, FSA/HSA data, and health plan information exposed.
• Marquis (bank vendor): 672,000 records including SSNs and financial account information exposed via a supply chain attack.
• Betterment: 1.4 million accounts breached through a marketing platform vendor.

If you received a breach notification from any of these companies — or from any company in 2025 or 2026 — your SSN should be treated as compromised until proven otherwise. The steps above apply regardless of which breach exposed your information.

For a broader look at how to protect yourself from identity theft on an ongoing basis, read our guide on identity theft warning signs and our data breach response checklist.

Frequently Asked Questions

How do I know if my SSN is on the dark web? Dark web monitoring services continuously scan hidden forums, breach databases, and hacker marketplaces for your personal information. If your SSN appears, you receive an alert. Without monitoring, you typically find out only after the damage is done.

How long does identity theft take to resolve? Simple cases (a single fraudulent account) can often be resolved in weeks. Complex cases involving multiple accounts, tax fraud, or employment fraud can take months to years. Starting immediately — especially with a credit freeze — shortens the resolution timeline significantly.

Does freezing my credit affect my score? No. A credit freeze has zero impact on your existing accounts or your credit score. It only prevents new credit inquiries from being processed.