How to protect personal info after AT&T data breach

Some 73 million former and current AT&T account holders are being notified that sensitive information, including like full names and Social Security numbers, has been leaked onto the dark web as a result of a data breach at the Dallas-based telecommunications giant last weekend.

The breach could pose serious risks to those affected and open up users to becoming victims of identity fraud.

AT&T said it will notify users who have been affected through mail or email. The company has also said it is offering affected customers complimentary identity-theft and credit-monitoring services.

Criminals who steal private data often sneak small purchases in between larger bills in the hopes users won’t notice it, said Mitch Thornton, executive director of the Darwin Deason Institute for Cybersecurity at Southern Methodist University.

“Monitor your credit for suspicious activity. Don’t just pay your credit card bills and whatnot without going through your transactions,” Thornton said.

Resetting passwords and applying two-factor authentication, a security system that requires two forms of identification, should always be in place to be the most well-protected.

Resetting a password every six months could save individuals a headache down the road, Thornton said.

Though it might be a pain, applying credit freezes and locks could also be helpful.

Credit locks typically cost users $10-$25 and can be applied instantly while credit freezes are usually free but can take longer to go into effect, sometimes up to five business days.