If you receive information about a data breach (text message, email, media report):

1. Stay calm: acting quickly is what matters now.
2. Change your passwords:
   1. for the account affected by the breach,
   2. for your email (this is the most important account!),
   3. for your bank, if the passwords were similar.
3. Do not answer suspicious calls: following a data breach, you may often receive calls ‘from your bank’ or ‘from a government department’. Do not give out any details over the phone. Hang up and call the official number yourself.
4. Enable notifications and two-factor authentication:
   1. enable SMS or email verification when logging in,
   2. enable an additional code (2FA).
5. Block your PESEL number: online via gov.pl.
6. Monitor your bank account:
   1. check for any unusual transactions,
   2. and check for any login attempts.

The most important point to remember: A data breach is nothing to be ashamed of. It’s a sign that you need to stay calm and take things step by step.