Use this article if:
- You think that your email addresses, passwords, or other personal information is on the dark web
- You think that your personal information has been stolen, breached, or used illegally
- You want to learn how to fix these breaches
More resources:
To learn more about our new personal protection apps and services, visit the McAfee Security product page.
As online security threats grow, it’s important to know if cybercriminals have stolen your personal information.
If cybercriminals have your personal information, they can sell and trade it on the dark web, alongside many other types of commodity.
Information traded and sold on the dark web often includes stolen passwords, email addresses, phone numbers, and other types of personal information (known as Personally Identifiable Information, or PII). This information is typically obtained through data breaches.
If we find your data on the dark web, or you suspect that your data is on the dark web, follow the steps below to protect your identity.
NOTES:
- The steps vary by country. So select your country from the list
- Not all countries in the list below have remediation steps. We are working to update this article with more steps over time
- Telephone numbers and web links are correct at the time of publishing. But these points of contact might change. Always check using local resources to make sure that you are using the latest contact details.
Click to expand your country, then follow the steps.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the companies where you know that fraud occurred. If applicable, also inform the companies that issued your plastic cards. |
|
Step 2 | Apply for a Commonwealth Victims’ Certificate. |
|
Identity Theft Checklist – Context-Specific Steps
Actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Contact IDCARE | Australia has a service called IDCARE that can help you learn more about ID Theft and recovery. |
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the companies where you know that fraud occurred. If applicable, also inform the companies that issued your plastic cards. |
|
Step 2 | Place a fraud alert with both bureaus | Place a fraud alert with both of the following credit bureaus: |
Step 3 | File a report with your local police station |
|
Step 4 | Contact the Canadian Anti-Fraud Centre | Call toll free at 1-888-495-8501 or via the Fraud Reporting System. |
Identity Theft Checklist – Context-Specific Steps
Actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Lost or stolen passport |
|
|
Lost Social Insurance Number (SIN) |
|
|
Lost or stolen immigration documents | Contact Citizenship and Immigration Canada. | |
Stolen mail or fraudulent mail redirect |
|
|
Lost or stolen provincial or territorial identity documents | These documents include:
Also, contact the province or territory that issued the document if:
You can find contact information on provincial and territorial government websites |
Additional information about why Service Canada does not issue new Social Insurance Numbers for those affected by a data breach:
- A new Social Insurance Number does not protect you from fraud and identity theft.
- A new Social Insurance Number is not a fresh start, or protection from fraud or identity theft.
- If someone else uses your old Social Insurance Number and the business does not check the person’s identity, you might have to prove that you were not involved in the fraud. You might also have to pay the impostor’s debts.
- A new Social Insurance Number introduces complexities.
- The Government can only share your new Social Insurance Number with the federal departments and agencies that use your Social Insurance Number.
- It is up to you to provide your new Social Insurance Number to organizations with which you shared your old Social Insurance Number. These organizations might include financial institutions, creditors, pension providers, recent and current employers.
- Not doing so, or failing to do so properly, risks not receiving benefits. It also leaves the door open to subsequent fraud or identity theft.
- You double your monitoring efforts with two Social Insurance Numbers instead of one.
- A new Social Insurance Number does not erase your old Social Insurance Number. You would need to monitor your accounts and credit reports for both Social Insurance Numbers on a regular and ongoing basis, which would be burdensome.
- Multiple Social Insurance Numbers increase the risk of fraud.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the companies where you know that fraud occurred. If applicable, also inform the companies that issued your plastic cards. |
|
Step 2 | Contact a credit agency. | Contact a credit agency to find out more about your credit report and see if a loan or account has been issued in your name.
|
Step 3 | File a report with your local police station |
|
Identity Theft Checklist – Context-Specific Steps
Actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Lost or stolen passport |
|
|
Lost of stolen driver’s license |
NOTE: The replacement driver’s license has the same expiry date as the lost license. |
|
Lost or stolen check book, Eftpos card, or credit card |
|
|
Stolen mail or fraudulent mail redirect |
|
Identity Theft Checklist – Optional
Optional actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Credit Suppression |
Contact all three Credit Reporting Agencies:
|
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred. |
|
NOTE: More steps and guidance will be shown here as this article is updated.
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the companies where you know that fraud occurred. If applicable, also inform the companies that issued your plastic cards |
|
Step 2 | Place a fraud alert with a credit bureau |
When one bureau is alerted, that bureau is obligated to alert the other two bureaus.
This action does not cost you anything, and makes sure that businesses must verify your identity before new credit is issued in your name.
|
Step 3 | Report the incident to Action Fraud | Call 0300 123 2040 Monday-Friday 8 a.m. – 8 p.m. (Saturday, and Sunday – Closed).
You can also make a report on the Action Fraud website. |
Step 4 | File a report with your local police station |
|
Identity Theft Checklist – Context-Specific Steps
Actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Lost or stolen passport |
NOTES:
|
|
Lost of stolen checkbooks |
|
|
Lost or stolen driver’s license |
Or, you can call DVLA at 0300 790 6801 and go through this process over the phone. |
Carry out these steps first
Suggested priority | Steps to take | |
Step 1 | Inform the affected companies where you know that fraud occurred |
|
Step 2 | Place a fraud alert with a credit bureau |
When one bureau is alerted, that bureau is obligated to alert the other two bureaus. This action does not cost you anything, and makes sure that businesses must verify your identity before new credit is issued in your name.
|
Step 3 | Report the incident to the Federal Trade Commission (FTC) |
Go to identitytheft.gov and fill out the incident. The FTC will help you with further steps after you have created an account. |
Step 4 | File a report with your local police department |
|
Identity Theft Checklist – Repair
Carry out these steps next
Suggested priority | Steps to take | |
Step 1 | Close new accounts opened in your name |
|
Step 2 | Remove fraudulent charges from accounts that are yours |
|
Step 3 | Correct your credit report |
TransUnion.com Experian.com Equifax.com |
Identity Theft Checklist – Optional Items
Consider taking the following steps
Identity breach | Steps to take | |
Set up a credit freeze | Contact each of the three credit bureaus show above to set the freeze.
A credit freeze:
|
|
Obtain an extended fraud alert | Available for free if someone stole your identity.
This alert is not a replacement for Identity Monitoring. It does not prevent data breaches or leaks, Extended fraud alerts last for 7 years. Contact each of the three credit bureaus and ask for an extended fraud alert. |
Identity Theft Checklist – Context-Specific Steps
Actions to take for specific types of identity breach are shown below
Identity breach | Steps to take | |
Social Security Number (SSN) misuse |
|
|
Debt collection on a fraudulent debt |
|
|
Lost or stolen SSN | Follow these steps to apply for a new SSN. | |
Lost or stolen driver’s license | Contact your local DMV to report it and get next steps for issuance of a new ID or replacement ID. You can search for your nearest DMV here. |
|
Lost or stolen passport | Call the State Department at 1-877-487-2778.
To replace your passport:
|
Learn more:
- To learn more about data breaches, see TS103129 – Identity Monitoring overview
- To learn more about the dark web, see TS103098 – What is the dark web?
- You can also visit the McAfee Identity Protection Service forum
Why Identity Monitoring is important
It’s vitally important to know if your personal information is on the dark web. Once because you can then take steps to prevent the cybercriminals from benefiting at your expense. The McAfee Identity Monitoring service continually scans the dark web for your personal information, and we alert you when we find your data there. When we alert you, we guide you through the steps that you need to take to fix things.
NOTE: You can’t change your information found on the dark web. And we can’t change or remove it, either. Once it’s there, it’s there. But if you know that particular accounts have been breached, you can take back control by changing the passwords of those accounts, or by taking other actions.
Our Identity Monitoring service detects your PII on the dark web on average 10 months ahead of other services. As we detect much earlier, we can alert you much earlier. Early notifications allow you to secure your accounts quicker, and minimize the time that cybercriminals have to conduct financial fraud with your details.