DeWine offers tips following breach

Yahoo recently announced a data breach that affects 500 million user accounts, reporting that the information was stolen in late 2014 and may have included names, email addresses, telephone numbers, dates of birth, “hashed” passwords, and some security questions and answers.

In the wake of Yahoo’s announcement, Ohio Attorney General Mike DeWine’s office is offering tips for users to help protect themselves.

• Change your passwords and your security questions and answers: Change your Yahoo account passwords, and if you used the same password for other accounts, change those account passwords too. (Use a different password for each account.) Also change any security questions and answers you may have provided.

• Use complex passwords: A password should be lengthy and it should contain multiple different characters, such as a variety of numbers, letters, and symbols. Consider taking a sentence you can remember and adding multiple different numbers and symbols throughout. Update your passwords regularly.

• Consider using twofactor verification: Twofactor authentication requires a password and another step to verify your identity. For instance, some sites may require a password and then ask you to answer a question or enter a unique code to access your account. This adds a second line of defense.

• Monitor your bank accounts: Look for suspicious activity. If you find errors, immediately notify your bank or credit provider.

• Check your credit report: Monitoring your credit report can help you identify signs of potential identity theft. You are entitled to one free credit report per year from each of the three major credit reporting agencies. Visit www.AnnualCreditReport.com to access those reports. You can pull all three at once, or you can stagger pulling your reports throughout the year.

• Beware of scams related to the breach: Con artists may pretend to have information about the breach or they may falsely claim to want to help you. Some calls or messages may be scams designed to steal your money or personal information. Don’t give out personal information to those who contact you unexpectedly (even if they say they want to help you) and be wary about clicking on links or downloading attachments in messages.

Signs of possible identity theft may include:

• Unexpected mail about accounts you did not open.

• Credit card charges you never made.

• Unexpected collection calls.

• Another person’s name showing up in your background check or credit report.

• Credit reporting errors or a lower-than-expected credit score.

Victims of identity theft should contact the Ohio Attorney General’s Office at 800-282-0515 or www. OhioProtects.org.

DeWine created an Identity Theft Unit in 2012 to help victims repair the effects of identity theft, such as by clearing fraudulent debt in a victim’s name.