SSN leaked in Change Healthcare breach — bank accounts frozen, what steps to take NOW

Your Social Security number was exposed in a data breach and now the dominoes are falling. Maybe your bank froze your accounts due to suspicious activity. Maybe new credit lines are being opened in your name. Maybe you got a letter from Change Healthcare or some other company telling you your most sensitive data is in the hands of criminals.

An exposed SSN is an identity theft emergency, but it's a manageable one. The key is acting fast and in the right order. Every hour matters right now — but this is fixable if you take the right steps.1

A credit freeze is always the better choice when your SSN is compromised. You can temporarily lift the freeze online in minutes whenever you need to apply for credit yourself, then re-freeze immediately after.

If your credit report shows accounts you didn't open, here's how to dispute them:2

Credit fraud is the obvious risk, but a stolen SSN opens other attack vectors:

Tax fraud: Filing a fake tax return in your name to steal your refund. Apply for an IRS IP PIN to prevent this.

Medical identity theft: Using your SSN to get medical care in your name, which corrupts your medical records. Monitor your health insurance EOBs for treatments you didn't receive.

Employment fraud: Using your SSN to get hired, which creates tax liability for you. Check your Social Security statement at ssa.gov for earnings you didn't earn.

Government benefits fraud: Filing for unemployment or disability benefits using your identity. Contact your state labor department if you receive unexpected unemployment correspondence.

Here's what most people don't realize: breach data doesn't just circulate on the dark web. It gets absorbed into the broader data broker ecosystem. Your leaked information gets cross-referenced with public records and marketing databases, creating richer profiles on sites like Spokeo, BeenVerified, and dozens of others. Removing yourself from people-search sites after a breach reduces the amount of combined data available to anyone searching for you — including criminals doing reconnaissance for identity theft.

After a breach, the responsible company usually offers 1-2 years of free credit monitoring. Take it — but understand its limitations.3 Credit monitoring alerts you AFTER someone opens an account in your name. A credit freeze PREVENTS them from opening the account in the first place. Monitoring is a detective tool. Freezing is a preventive tool. Use both.

Identity theft from an SSN breach can surface months or years later. Keep your credit frozen permanently — there's no downside. Review your credit reports quarterly. Monitor your Social Security statement at ssa.gov annually for earnings from employers you never worked for. And consider ongoing monitoring that watches for your information resurfacing across both public databases and data broker sites.