Your Online Account May Have Been Breached? Don’t Just Sit There. Do Something.
Too many people respond with a shrug and maybe change their password. That’s asking for trouble.
3 min
How do consumers respond when their online accounts are exposed to hackers? Many of them simply don’t.
Data breaches at major firms have become all too common, with more than 110 million user accounts exposed in just the second quarter of 2023. Yet our research found that nearly two-thirds of U.S. consumers would return to a site after they were notified of a breach—with only the bare minimum of precautions, like changing their passwords.
Almost a quarter of the roughly 200 people we surveyed said they would return to the compromised website with no changes to their behavior at all. Only 10% said they wouldn’t go back.
Even people who had cybersecurity training within the past 90 days—in other words, people who should be primed to protect themselves—took risks. In this subsequent study, over a quarter of roughly 500 people said they would return to the breached website while taking the absolute minimum security measures, and only about 9% would take more-complicated steps such as setting up two-factor authentication. And they would do that only if they experienced real financial consequences, like fraudulent charges on their credit cards.
Why wouldn’t people protect themselves? Many of the consumers we surveyed believed that there were few—if any—alternatives to the websites they used frequently, and all websites seemed to be affected by data breaches. Why bother beefing up security? Likewise, some people said they would stick with a compromised site because they had put so much time and effort into their presence on it—a classic sunk-cost fallacy.
Since doing nothing may put your finances and personal information at risk, what should you do in case of a breach? Based on my experience as a researcher in this domain and guided by input from customers recovering from data breaches, I recommend the following actions.
The first steps
Take each data-breach notification seriously. Immediately change passwords on the affected sites and sign up to follow the updates from the breached firm. This is also a good time to ensure your passwords are unique and not being used across several sites.
Find out what kind of breach it is. Some breaches violate your privacy—such as stealing your playlist or viewing preferences—but may not be as damaging as other hacks. So they may just require a simple password change on the affected site. Even the breach of encrypted password data, such as in the LastPass data breach, while serious, isn’t an immediate threat.
On the other hand, things like compromised credit-card numbers, financial data and personally identifiable information need stronger attention. Even seemingly innocuous breaches of social-media networks may reveal data that can be used to impersonate you and perhaps be used to invade the privacy of those around you. For instance, hackers might be able to figure out your “forgot password” questions on websites by learning where you grew up, the names of your pets and more.
The next steps
Set up push notifications for financial data. When you’re notified of data breaches that involve credit cards or payment information, review the transactions on the affected accounts, going back to the previous payment period. Whether or not there has been unusual activity, protect yourself by adding mobile push notifications for credit-card transactions—an option offered by most credit cards, online-payment mechanisms and banks. Most notifications happen in real time, so consumers affected by data breaches can quickly identify and contest improper charges.
Use free credit monitoring. Some credit cards and banking firms such as Discover and Chase provide free monitoring of consumer credit and provide monthly updates of noteworthy events and changes. Some go further and provide benefits such as removal of your personally identifiable information found on public sites, including data brokers. Using these services is an easy way to identify and report fraudulent activity, as well as protect against identity theft—so review this data regularly if your information has been exposed.
Enable dual-factor authentication on all of your accounts. This is a good practice in general but is especially important for anyone affected by data breaches. With dual-factor authentication, you enter your password as usual but then confirm your identity using a personal device, typically a mobile phone. This limits someone from logging into the account with a stolen password.
If your social-media platform has been breached
Along with enabling dual-factor authentication, there are a number of steps you should take in the event of a social-media breach.
First, change the password and log in with the new one. Check the login-activity page to see if anyone other than you has logged in, and then look for the option to delete all other active sessions—so every other device that is currently logged in is effectively logged out.
Also review all direct messages, posts, and comment activity on the account, and report anything suspicious. If it affects other people, let them know. Finally, pause or temporarily deactivate the account, if that is an option, to make it even tougher for hackers to get access.
Rajendran Murthy is the J. Warren McClure Research Professor of Marketing at the Rochester Institute of Technology’s Saunders College of Business.
Copyright 2020, Dow Jones & Company, Inc. All Rights Reserved Worldwide. LEARN MORE
Records keep falling in 2025 as harbourfront, beachfront and blue-chip estates crowd the top of the market.
A divide has opened in the tech job market between those with artificial-intelligence skills and everyone else.
3 min
Investors normally don’t talk about the risks of a bubble forming in the asset that they’re buying to hedge against a different bubble, but gold’s extraordinary surge is starting to trigger uncomfortable conversations about the yellow metal’s bullish prospects.
Gold prices have gained more than 55% this year, blowing past the $3,000 an ounce mark in early spring and topping the $4,000 threshold for the first time on record last month. Gold was up another 3.3% to $4,108.60 in Monday trading, a new record high.
Myriad reasons have been cited for the surge, including the slumping U.S. dollar, soaring tech stocks that have concentrated broader market risks into a handful of megacap tech names, purchases by central banks seeking to diversify away from the dollar, and renewed inflation risks tied to ongoing tariff and trade disputes.
Central bank buying has also been significant, with China alone adding 39.2 tons to its overall holdings since it returned to the market in November of last year.
“Central banks’ appetite for gold is driven by concerns from countries about Russian-style sanctions on their foreign assets in the wake of decisions made by the U.S. and Europe to freeze Russian assets, as well as shifting strategies on currency reserves,” said ING commodities strategist Ewa Manthey.
“The pace of buying by central banks doubled following Russia’s invasion of Ukraine in 2022.”
Gold-backed ETFs , meanwhile, are attracting billions in new investments, with overall additions likely to have topped 100 tons over the three months ending in September. That’s more than triple the quarterly average over the past eight years.
The combination of forces is likely to drive more gains for gold in the months ahead, according to Société Générale’s commodity research team, headed by Mike Haigh.
“Gold’s ascent to $5000 seems increasingly inevitable,” Haigh wrote in a note published Monday, citing both strong ETF flows and renewed central bank purchases.
Haigh also notes that ETF flows are tracking a rise in SocGen’s U.S. uncertainty index, which is now pegged at more than three times the level it reached over the five months before last year’s presidential election win for President Donald Trump.
“We cannot imagine a situation where we return to pre-Trump index uncertainty normalcy over our forecast horizon, so ETF flows are a key component to our price forecasting,” Haigh said. His $500o price target is pegged for the end of 2026.
Lisa Shalett, chief investment officer at Morgan Stanley Wealth Management, has a different take, tied in part to what she sees as a way for governments to “challenge the dollar’s stranglehold on global money movements.”
Gold holdings, Shalett argues, can “improve collateralisation of their fiat currencies and/or cryptocurrencies in a world where currency markets undefined may be remade by digital assets, cryptocurrencies, and stablecoins.”
The gold market’s mimicry of previous historic booms, however, has caught the attention of Bank of America analyst Paul Ciana, who cautioned in a note published last week that “prices have tended to pivot near round-number levels.”
Citing data showing “midway corrections” in long term bull markets for gold, Ciana sees the chances for a near-term pullback that “rhymes” with pullbacks of around 40% in the mid-1970s and 25% following the global financial crisis in 2008.
“This boom is about 10 years old, smaller in size than the 1970s and 2000s boom but nearly as old,” Ciana wrote. “This warrants caution into round number resistance at $4,000, or again later at $5,000.”
Gold isn’t likely a bubble. It’s hard for central banks to sell, and many of the countries encouraging its import, like China and India, also make it difficult for investors to move offshore.
But gold did lose around 60% of its value in the two decades that followed its 1970s boom, with bear markets following in 2008 and 2015.
This year’s really is still going strong, of course, but with gold’s advance tied to nearly all of the concerns currently gripping financial markets, maybe it’s worth asking if it’s being “all things to all people” is the best kind of hedge—or just another risky bet on rising prices.
By improving sluggish performance or replacing a broken screen, you can make your old iPhone feel new agai
With two waterfronts, bushland surrounds and a $35 million price tag, this Belongil Beach retreat could become Byron’s most expensive home ever.
