Hackers stole Social Security numbers. How to freeze your credit

USDoD, a hacking group, has allegedly stolen billions of records from millions of people, including their Social Security numbers.

The hack happened in or around April 2024, according to a class-action lawsuit filed in U.S. District Court in Fort Lauderdale, Florida, reported by Bloomberg Law, where USDoD claimed it had allegedly stolen the personal records of 2.9 billion people from National Public Data.

Here is what Texans should know about the breach and how you can protect your information in the future:

What information was stolen in the Social Security data breach?

Class-action law firm Schubert, Jonckheer & Kolbe said in a news release that the stolen file contains 277.1 gigabytes of data, including names, address histories, relatives and Social Security numbers dating back at least three decades.

The hacker group apparently sold the data on the dark web for $3.5 million.

How to freeze your credit

If you suspect that your personal information or identity has been compromised, getting a credit freeze can offer valuable protection against fraudulent activities. A credit freeze limits access to your credit report, serving as a preventive measure to safeguard your financial well-being.

Freezing your credit is a straightforward process and can be done through the three major credit bureaus: Equifax, Experian, and TransUnion.

Here’s how you can do it:

1. Equifax:

• Online: Visit the Equifax Credit Freeze page.
• By Phone: Call Equifax at 1-800-685-1111.
• By Mail: Send a request to Equifax, P.O. Box 105788, Atlanta, GA 30348. Include your name, address, Social Security number and copies of documentation proving your identity (like a driver’s license, utility bill, or bank statement).

2. Experian:

• Online: Visit the Experian Credit Freeze page.
• By Phone: Call Experian at 1-888-397-3742.
• By Mail: Send a request to Experian Security Freeze, P.O. Box 9554, Allen, TX 75013. Include your name, address, Social Security number and proof of identity.

3. TransUnion:

• Online: Visit the TransUnion Credit Freeze page.
• By Phone: Call TransUnion at 1-888-909-8872.
• By Mail: Send a request to TransUnion, P.O. Box 160, Woodlyn, PA 19094. Include your name, address, Social Security number and proof of identity.
• Personal Information: Full name, address, date of birth, Social Security number and possibly other personal details.
• Identification: You might need to provide a copy of your driver’s license, passport, utility bills or other documentation to verify your identity.

What should I do if my information was stolen?

If you’re concerned that your data and personal information were compromised, there are some steps you can follow to prevent fraud and identity theft.

Here are some tips from the Texas attorney general’s office:

• Store documents that have your personal information, including financial documents, Social Security, Medicare, and credit cards, in a safe place at home and work.
• Limit what you carry. Leave your Social Security card and Medicare card at home unless you will need them for a specific reason.
• Don’t share your personal, financial or health plan information over the phone, through the mail or over the internet unless you have a trusted relationship with the requestor and you initiated the contact.
• Inspect your credit card receipts. It should not show your full account number. If your receipt shows more than the last four digits, report it to the Office of the Attorney General.
• Use only one credit card for your online purchases. Do not use a debit card.
• Consider opting out of most prescreened offers of credit by calling 1-888-567-8688 or going to optoutprescreen.com. Those offers could be used by identity thieves who steal mail.
• Shred receipts; credit offers; loan and credit applications; insurance forms; bank statements; and similar documents when you no longer need them. A “cross cut” shredder is best for this.
• Before you sell, give away or dispose of a laptop, computer or mobile device, get rid of all the personal information you have stored on it. Learn more from the Federal Trade Commission about disposing old computers.

How can I protect my personal data?

Protecting personal data on the internet is crucial for maintaining privacy and security. Here are some effective ways to safeguard your personal information:

1. Use strong, unique passwords

• Create strong passwords with a mix of letters, numbers and symbols.
• Avoid using the same password across multiple sites.
• Use a password manager to generate and store complex passwords securely.

2. Enable two-factor authentication (2FA)

• Activate 2FA on your online accounts for an additional layer of security. This usually requires a second form of verification, like a code sent to your phone.

3. Be cautious with phishing scams

• Be wary of emails, messages or websites that ask for personal information.
• Verify the sender’s identity before clicking on links or downloading attachments.

4. Update software regularly

• Keep your operating system, apps and antivirus software up to date to protect against the latest threats.
• Enable automatic updates where possible.

5. Use encrypted connections

• Ensure website addresses use HTTPS, which encrypts data between your browser and the website.
• Consider using a VPN (virtual private network), especially on public Wi-Fi networks, to encrypt your internet connection.

6. Limit personal information sharing

• Be mindful of the personal information you share on social media and other online platforms.
• Adjust privacy settings on social networks to control who can see your information.

7. Regularly review privacy settings

• Periodically check and update the privacy settings on your online accounts.
• Remove or limit permissions for apps and services that have access to your data.

8. Secure your devices

• Lock your devices with a PIN, password or biometric authentication (fingerprint, face recognition).
• Use encryption on your devices to protect stored data.

9. Be cautious with public Wi-Fi

• Avoid accessing sensitive accounts (like banking) over public Wi-Fi.
• Use a VPN when connecting to public Wi-Fi to protect your data from potential eavesdroppers.

10. Back up your data

• Regularly back up important data to an external drive or cloud service.
• Ensure backups are encrypted to protect against unauthorized access.

By adopting these practices, you can significantly reduce the risk of your personal data being compromised online.

How to freeze your credit card

Freezing your credit card is a security measure that prevents new charges or accounts from being opened in your name without your consent.

To freeze your credit card, contact your credit card issuer through its customer service line or via its online platform. You’ll need to verify your identity, typically by providing personal information and answering security questions.

Once the freeze is in place, any attempts to use the card will be declined until you lift the freeze.

This measure is often used if you suspect fraud or have lost your card. It’s important to note that recurring payments may still go through, so review any automatic transactions you have set up.

USA TODAY contributed to this report.