The terms account compromise and identity compromise are sometimes used interchangeably, but they aren't the same thing.

An account compromise means someone has gained unauthorized access to one of your accounts. Identity compromise means your personal information has been exposed or used in a way that could allow someone to impersonate you.

An account compromise can sometimes lead to identity compromise, especially if the account contains sensitive personal or financial information.

• Account compromise happens when someone gains unauthorized access to one of your accounts, such as your email, banking, social media, or another online service. They may change your password, send messages, access information, change payment details, or use the account to access other services.
• Identity compromise goes beyond access to a single account. It happens when personal information, such as your Social Security number, government ID, financial information, or tax information, is exposed or used by someone else. That information could potentially be used to open accounts, apply for credit, file taxes, or impersonate you.

If an Account Is Compromised

If you think someone has accessed one of your accounts, regain control and secure it as quickly as possible. A few important steps can help prevent continued access and protect your other accounts:

• Change the password to a new, unique password you haven't used anywhere else.
• Turn on two-factor authentication (2FA) if it isn't already enabled.
• Sign out of unfamiliar devices or active sessions and remove any recovery information or connected apps you don't recognize. 
• Check for changes you didn't make, such as forwarding rules, filters, payment information, recovery information, or account settings. 
• Change the password anywhere else you used the same or a similar password. Start with important accounts such as your email, banking, financial, and work accounts. 
• Review recent activity for unfamiliar logins, messages, transactions, or other changes you didn't make.

Identity Compromise: 
If Your Identity May Be Compromised

Identity compromise will require help outside of the company or service where the incident occurred. Depending on what information was exposed or misused, you may need to contact financial institutions, credit bureaus, government agencies, or other organizations that can help protect your identity.

• Contact your bank or financial institution if money was transferred or financial information may have been affected. Use a trusted number, such as the number printed on the back of your card. 
• Freeze your credit with Equifax, Experian, and TransUnion. A credit freeze can help prevent someone from opening new credit in your name and can be temporarily lifted when you need to apply for credit.
• Report identity theft through IdentityTheft.gov if your identity has actually been misused. The FTC resource can provide an official identity theft report and personalized recovery plan. 
• Consider an IRS Identity Protection PIN if your Social Security number or tax information may be at risk. The PIN helps prevent someone else from filing a federal tax return using your SSN. 
• Consider freezing your ChexSystems report to help prevent someone from opening a new bank account in your name. 
• Contact your mobile carrier and ask about a number lock or port-out PIN to help prevent someone from transferring your phone number to another SIM.
• Review your credit reports for accounts, loans, or inquiries you don't recognize. The packet points users to AnnualCreditReport.com for this review. 
• Keep a record of the steps you take, including organizations contacted, dates, case or reference numbers, and any reports you've filed. Banks and agencies may ask for this information later.