Ashley Madison data breach

Security remediation checklist

Work through these steps, most urgent first:

1. Change the password on every affected site immediately, and anywhere you reused it.
2. Sign out of all sessions and revoke app passwords, API keys and connected apps.
3. Turn on two-factor authentication (authenticator app or security key) wherever it is offered.
4. Use a unique password for every site so one breach cannot unlock other accounts.
5. Use a password manager to generate and store strong, unique passwords.
6. Change your security questions and password hints — treat old answers as public.
7. Ask your mobile carrier for a SIM-swap / port-out PIN to protect your phone number.
8. Watch for identity fraud: unexpected letters, credit applications or accounts in your name.
9. Be alert to extortion or blackmail attempts — never pay, and report them.
10. Expect targeted phishing emails that mention this breach. Do not click unexpected links.
11. Be wary of scam SMS messages and calls (smishing / vishing) that use your details.
12. Check other accounts that use the same username or email and secure them.
13. Review the privacy settings of your online accounts and limit what is publicly visible.
14. Keep an eye on your accounts for logins or changes you do not recognise.
15. Subscribe to breach alerts so you hear about future breaches quickly.