Your Online Account May Have Been Breached? Don’t Just Sit There. Do Something.
Too many people respond with a shrug and maybe change their password. That’s asking for trouble.
3 min
How do consumers respond when their online accounts are exposed to hackers? Many of them simply don’t.
Data breaches at major firms have become all too common, with more than 110 million user accounts exposed in just the second quarter of 2023. Yet our research found that nearly two-thirds of U.S. consumers would return to a site after they were notified of a breach—with only the bare minimum of precautions, like changing their passwords.
Almost a quarter of the roughly 200 people we surveyed said they would return to the compromised website with no changes to their behavior at all. Only 10% said they wouldn’t go back.
Even people who had cybersecurity training within the past 90 days—in other words, people who should be primed to protect themselves—took risks. In this subsequent study, over a quarter of roughly 500 people said they would return to the breached website while taking the absolute minimum security measures, and only about 9% would take more-complicated steps such as setting up two-factor authentication. And they would do that only if they experienced real financial consequences, like fraudulent charges on their credit cards.
Why wouldn’t people protect themselves? Many of the consumers we surveyed believed that there were few—if any—alternatives to the websites they used frequently, and all websites seemed to be affected by data breaches. Why bother beefing up security? Likewise, some people said they would stick with a compromised site because they had put so much time and effort into their presence on it—a classic sunk-cost fallacy.
Since doing nothing may put your finances and personal information at risk, what should you do in case of a breach? Based on my experience as a researcher in this domain and guided by input from customers recovering from data breaches, I recommend the following actions.
The first steps
Take each data-breach notification seriously. Immediately change passwords on the affected sites and sign up to follow the updates from the breached firm. This is also a good time to ensure your passwords are unique and not being used across several sites.
Find out what kind of breach it is. Some breaches violate your privacy—such as stealing your playlist or viewing preferences—but may not be as damaging as other hacks. So they may just require a simple password change on the affected site. Even the breach of encrypted password data, such as in the LastPass data breach, while serious, isn’t an immediate threat.
On the other hand, things like compromised credit-card numbers, financial data and personally identifiable information need stronger attention. Even seemingly innocuous breaches of social-media networks may reveal data that can be used to impersonate you and perhaps be used to invade the privacy of those around you. For instance, hackers might be able to figure out your “forgot password” questions on websites by learning where you grew up, the names of your pets and more.
The next steps
Set up push notifications for financial data. When you’re notified of data breaches that involve credit cards or payment information, review the transactions on the affected accounts, going back to the previous payment period. Whether or not there has been unusual activity, protect yourself by adding mobile push notifications for credit-card transactions—an option offered by most credit cards, online-payment mechanisms and banks. Most notifications happen in real time, so consumers affected by data breaches can quickly identify and contest improper charges.
Use free credit monitoring. Some credit cards and banking firms such as Discover and Chase provide free monitoring of consumer credit and provide monthly updates of noteworthy events and changes. Some go further and provide benefits such as removal of your personally identifiable information found on public sites, including data brokers. Using these services is an easy way to identify and report fraudulent activity, as well as protect against identity theft—so review this data regularly if your information has been exposed.
Enable dual-factor authentication on all of your accounts. This is a good practice in general but is especially important for anyone affected by data breaches. With dual-factor authentication, you enter your password as usual but then confirm your identity using a personal device, typically a mobile phone. This limits someone from logging into the account with a stolen password.
If your social-media platform has been breached
Along with enabling dual-factor authentication, there are a number of steps you should take in the event of a social-media breach.
First, change the password and log in with the new one. Check the login-activity page to see if anyone other than you has logged in, and then look for the option to delete all other active sessions—so every other device that is currently logged in is effectively logged out.
Also review all direct messages, posts, and comment activity on the account, and report anything suspicious. If it affects other people, let them know. Finally, pause or temporarily deactivate the account, if that is an option, to make it even tougher for hackers to get access.
Rajendran Murthy is the J. Warren McClure Research Professor of Marketing at the Rochester Institute of Technology’s Saunders College of Business.
Copyright 2020, Dow Jones & Company, Inc. All Rights Reserved Worldwide. LEARN MORE
From making unpopular decisions to learning when to listen, leaders from five businesses reveal what nobody prepared them for — and how running a company has challenged their expectations.
Technology and semiconductor shares fell sharply as investors questioned the debt financing the AI infrastructure boom and confronted higher rates and Chinese competition.
Technology and semiconductor shares fell sharply as investors questioned the debt financing the AI infrastructure boom and confronted higher rates and Chinese competition.
4 minA sharp technology sell-off has exposed a new anxiety on global markets: whether the enormous borrowing behind the artificial-intelligence infrastructure boom can generate sufficient returns as interest rates rise and Chinese competition intensifies.
The artificial-intelligence investment boom has powered technology shares, semiconductor manufacturers and data-centre operators to extraordinary heights. Last week, investors were given a reminder that much of this expansion is being built with borrowed money.
The technology-heavy Nasdaq Composite fell 4.5 per cent over the week ended October 16, its weakest performance since late June. Semiconductor shares suffered an even deeper correction, with the Philadelphia Semiconductor Index losing about 11.4 per cent.
The selling spread quickly through global markets. Micron Technology fell 14.6 per cent over the week, while South Korea’s Samsung Electronics and SK Hynix dropped approximately 18 per cent and 24 per cent respectively.
This was more than a routine bout of profit-taking. Investors were reassessing three interconnected risks: higher interest rates, the rapidly expanding debt burden attached to AI infrastructure and the prospect of stronger competition from Chinese memory-chip manufacturers.
The debt behind the AI build-out
Artificial intelligence requires a physical infrastructure network of enormous scale. Data centres must be built, advanced processors purchased, power supplies secured and cooling systems installed before customers begin generating meaningful revenue from them.
Technology companies are increasingly supplementing their own cash with corporate bonds, syndicated loans, equipment leases, private credit and project-level financing.
JPMorgan describes the emerging funding model as a combination of conventional corporate borrowing and project finance tied to individual data-centre assets. In Australia, the Reserve Bank estimates that syndicated loans accounted for approximately three-quarters of data-centre financing during 2025 and 2026 to date.
The numbers are becoming large enough to affect broader credit markets. The Federal Reserve Bank of Dallas has cited Wall Street estimates suggesting AI-related investment-grade bond issuance could approach US$300 billion in 2026 alone.
That borrowing is not automatically problematic. Debt can be an efficient way to finance long-lived infrastructure when future revenue is sufficiently predictable. The concern is that AI technology, customer demand and computing economics are changing much faster than the repayment schedules attached to the assets.
A data centre financed today may carry debt for years. Investors must therefore make assumptions about future utilisation rates, electricity prices, chip performance, customer concentration and the amount businesses will ultimately pay for AI computing.
When interest rates rise, those assumptions become less forgiving.
Inflation changes the calculation
September’s US inflation data intensified the pressure. Consumer prices increased 3.7 per cent over the year, ahead of market expectations and up from 3.4 per cent in August.
The hotter reading reduced confidence that interest rates would fall quickly and pushed bond yields higher. That matters particularly for companies whose valuations depend on profits expected well into the future, as well as highly leveraged infrastructure operators that may need to refinance.
CoreWeave has emerged as a closely watched test case. The specialist cloud-computing company has accumulated substantial debt and lease obligations to build AI capacity, while relying on a concentrated group of large technology customers.
Its shares fell sharply during the sell-off, while the cost of insuring its debt against default climbed. CoreWeave has argued that its contracted backlog more than covers its obligations and that financial markets do not always understand its business model. Nevertheless, its securities have become a proxy for investor confidence in debt-funded AI infrastructure.
Oracle, another major investor in AI computing capacity, fell 8.8 per cent in Friday trading, while CoreWeave dropped 15.5 per cent.
The question is shifting from how much AI infrastructure can be built to how profitably it can be operated.
China adds another source of pressure
Interest rates were not the only catalyst. Reports of advances by Chinese memory-chip producer ChangXin Memory Technologies raised concerns that lower-cost Chinese products could increase competition across the global semiconductor industry.
Memory chips are essential to AI systems, but the industry is historically cyclical. Periods of tight supply and high pricing can encourage rapid investment, eventually producing oversupply and falling margins.
The prospect of a well-funded Chinese competitor expanding its technological capabilities unsettled investors in Samsung, SK Hynix and Micron. It also demonstrated that AI-related demand does not insulate chipmakers from conventional competitive pressures.
That combination—slower rate cuts, more expensive financing and potentially cheaper supply—challenged the assumption that every company exposed to AI would enjoy continually expanding margins.
A reset rather than the end of the boom
The sell-off does not establish that the AI boom is ending. Demand for computing power remains strong, the largest technology companies continue to generate formidable cash flows and many infrastructure projects are backed by long-term customer contracts.
What has changed is the market’s willingness to overlook the price and financing structure of that growth.
The most resilient companies are likely to be those able to fund investment from operating cash flow, secure long-duration customers and demonstrate that new capacity will earn returns comfortably above its financing costs.
More speculative operators may face greater scrutiny, particularly where debt is expensive, customers are concentrated or expected revenue depends on demand that has not yet materialised.
For Australian investors, the lesson extends beyond US technology shares. Local data-centre operators, infrastructure funds, electricity suppliers and property groups are increasingly exposed to the same investment cycle.
Artificial intelligence may remain one of the defining growth themes of the decade. But last week’s correction showed that enthusiasm for the technology does not eliminate financial discipline.
The next stage of the AI boom will be judged not only by computing power, model performance or demand for chips, but by something more traditional: whether the assets being financed can generate enough cash to repay the money borrowed to build them.
Fact box
Nasdaq Composite: Down 4.5 per cent for the week ended October 16, 2026
Philadelphia Semiconductor Index: Down approximately 11.4 per cent
Micron Technology: Down approximately 14.6 per cent
Samsung Electronics: Down approximately 18 per cent
SK Hynix: Down approximately 24 per cent
US September inflation: 3.7 per cent annually
Estimated 2026 AI-related investment-grade issuance: Approximately US$300 billion
Warmer minimalism, tactile materials and wellness focused layouts are redefining luxury interiors as homeowners design for comfort, connection and lasting appeal.
Limited to 630 units, Lamborghini’s latest Urus Capsule pushes personalisation further than ever, blending hybrid performance with over 70 bespoke design combinations.
