EMAIL BREACH CHECK

Change the password on the breached account right now. Use a strong, unique password that you haven't used anywhere else. A good password is at least 16 characters long and includes a mix of letters, numbers, and symbols.

Use our Password Strength tool to generate a secure one.

Enable Two-Factor Authentication (2FA) on every account that supports it. This adds a second layer of security even if your password is compromised.

Prefer authenticator apps (Google Authenticator, Authy) over SMS-based 2FA, as SMS can be intercepted via SIM-swapping attacks common in India.

Log into your accounts and check for recent login activity. Look for unfamiliar devices, locations, or IP addresses.

• Gmail: Settings > Security > Recent security activity
• Facebook: Settings > Security and Login > Where You're Logged In
• Instagram: Settings > Security > Login Activity

Sign out of all other sessions if you see anything suspicious.

If you used the same password on other sites, change those immediately. Attackers use "credential stuffing" — they try leaked email/password combos on hundreds of popular sites automatically.

Consider using a password manager (Bitwarden is free and open-source) to generate and store unique passwords for every account.

If the breach included financial data, monitor your bank and UPI transactions closely for the next few months.

• Enable SMS and email alerts for all transactions
• Check for small "test" transactions that scammers use before larger fraud
• Report unauthorized transactions to your bank within 3 days (RBI circular)
• File a complaint on cybercrime.gov.in if you suspect fraud

After a breach, expect a surge in targeted phishing attempts. Scammers use leaked personal info to craft convincing messages.

• Be suspicious of emails referencing the breach itself ("click here to secure your account")
• Never click links in emails — go directly to the website by typing the URL
• Watch for "digital arrest" scams, fake KYC updates, and spoofed bank SMS
• Use our Text Scam Analyzer to check suspicious messages