Hertel & Brown Physical & data breach: what happened and what to do

What we have on file

Every entry below is a catalogued record with its original source. We do not paraphrase beyond what the source reports.

What to do

1. Change the password anywhere you reused itThe exposure matters most when the same password protects your email, because email is how everything else gets reset.
2. Treat every call and text about this breach as a scam until proven otherwiseNo company will ask you for a one-time code, a PIN or a password. Hang up and call the number printed on your card.
3. Read your statements for the next three monthsCard fraud usually starts with a small test charge. Catching that one is what stops the large one.
4. Give your email account a password nothing else usesIt is the account that can reset all the others, so it is the one worth protecting first.

Questions people ask