What to do when a data breach notice doesn't say much
ESET explains how to act on vague breach notices as US victim notices surge and details shrink.
ESET's guide says publicly reported US breaches hit a high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center counted over 471 million notices in the first half of 2026, yet only 24% named an attack vector, its lowest rate. The article explains cautious reading of phrases such as accessed, no evidence of misuse, and may have been affected, and warns that some notices are scams. Next steps depend on the data type and include verifying the notice independently, resetting reused passwords, enabling 2FA, contacting the bank, and considering a credit freeze.
- Over 3,300 US breaches and about 280 million notices last year.
- ITRC logged 471 million notices in the first half of 2026.
- Only 24 percent of those notices named an attack vector.
- Treat unsolicited breach emails as possible phishing until verified.
- Response depends on whether credentials, cards, health, or IDs leaked.
- Vendors
- ESET
- Organizations
- ESETIdentity Theft Resource Center
- Countries
- United States
From the original article
6 min read at welivesecurity.com
Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
welivesecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.