🚨 Data Breach Response Guide

Account hacked or data leaked? Do these steps, in this order — by Dinal Studios

🧭 Why the Order Matters

Your email account is the master key — password resets for almost every other account land there. So the email gets secured first, before the account that was actually breached. Then you cut the attacker's live access (sessions), stop the same password from unlocking other accounts, and only then clean up and document. Follow the phases top to bottom; tick steps off as you finish them (progress is saved on this device).

0 of 16 steps done

📝 Document Everything — Incident Log

Banks, platforms and police will ask what happened, when, and what you changed. Memory fades fast under stress — write it down now. This log stays in your browser; copy it somewhere safe.

🔒 Locked Out Completely?

Use the official recovery flow only — start from the service's own app or by typing its real address yourself. Have ID ready; big platforms verify identity before handing an account back. Recovery can take days: another reason your email and recovery codes must be secured in advance.
Never pay a "recovery hacker". Accounts on social media offering to hack your account back for a fee are a second scam aimed at breach victims. There is no shortcut — only the platform can restore access.
⚠️ Beware the second wave: after a breach, criminals send fake "your account will be deleted — verify now" emails and texts. For the next few months, never log in through a link you were sent — open the app or type the address yourself, every time.

🧰 More Free Tools by Dinal Studios

Free, private, in-browser security tools — no sign-up, no tracking.

Personal Security Audit ChecklistAfter recovery, audit everything: 23 protections scored with priority fixes. Strong Password GeneratorGenerate the fresh, unique passwords this guide asks for. Password Strength TestCheck entropy and crack time before you trust a new password. 2FA Recovery Codes GeneratorPrintable backup codes so a lost phone never locks you out again. Phishing Awareness TrainerTrain yourself against the follow-up phishing wave. URL Safety CheckerPaste any suspicious link and get a plain-language safety verdict first.