Data Breach Response Guide
Guidance for clients notified that their personal information may have been compromised in a third-party data breach. The steps below are based on recommendations from the Australian Cyber Security Centre (ACSC) and IDCARE.
This is general guidance only. For serious breaches involving identity theft or significant financial exposure, contact IDCARE (a free national service) or visit the Australian Cyber Security Centre's recovery guidance.
Immediate Actions
Contact Your Bank
If any financial details were exposed, contact your financial institutions immediately. They can place alerts, freeze accounts, issue new cards, and monitor for suspicious transactions.
Secure Your Email
Your email is the key to most of your other accounts. Change your password, enable MFA, and check for any suspicious activity or forwarding rules you did not create.
Change the Breached Password
Change the password for the breached service immediately. If you have used that password elsewhere, change it at those other services too.
Next Steps (24-48 Hours)
Review Connected Apps
Check what other accounts use the breached account to sign in (such as "Sign in with Google" or similar). Remove any apps or services you do not recognise.
Enable MFA Everywhere
Turn on multi-factor authentication (MFA) for email, banking, myGov, and social media. Use an authenticator app rather than SMS where possible. The ACSC has guides at cyber.gov.au.
Request a Credit Report Ban
If identity documents were exposed, place a ban on your credit report with the three credit bureaus: Equifax, illion, and Experian. See Moneysmart for more information.
Ongoing Recommendations
Start Using a Password Manager
Password managers make it practical to have unique, strong passwords for every site. There are several reputable options available, including free ones. The ACSC has guidance on creating strong passwords.
Replace Compromised Documents
If your driver's licence or passport was exposed, you may be able to get a replacement with a new number. Contact your state road authority or the Australian Passport Office. Your state government may also have victim assistance services.
Monitor Your Accounts
Review bank statements regularly, check your credit report periodically (free annual reports available), and be cautious of unexpected contact claiming to be from banks or government.
Reporting & Assistance
Data breaches have become unfortunately common. The steps above significantly reduce your risk. If you have questions about how Savant Private protects your information, contact [email protected].
Last reviewed March 2026