Established by a former federal prosecutor · 20+ years prosecutorial experience · $12.5B lost to fraud in 2024 (FTC)
The Fraud CodexScam Intelligence
Live Threats
NewPig-butchering scams estimated to have stolen $75B globallyAlertIRS impersonation scams surge this 2026 filing seasonNewFake Coinbase support calls reported nationwide
● MEDIUM RISK

Fake Data Breach Notification

A phishing email impersonates a breach alert — "your data was exposed, reset your password here" — and the link goes to a fake login or "identity protection" page built to capture credentials. The irony is the point: it weaponizes your fear of being hacked. Go to the real site directly, never through the email's link.

Losses: Part of $3 billion in business email compromise (2024)
Targets: Anyone with email, employees of breached companies
Updated: 2026-01-07
Also known as: Breach Phishing · Fake Security Alert · Data Breach Scam
01

How It Works

Scammers exploit real (or fabricated) data breaches to trick you into giving up credentials. **How it works:** 1. Major data breach makes news (or scammer fabricates one) 2. You receive "official" email: "Your data was compromised in [Company] breach" 3. Email urges immediate action: "Reset your password" or "Claim free credit monitoring" 4. Link goes to convincing fake site that captures your credentials 5. Scammers now have your real login info **Variations:** - Fake password reset page - Phony credit monitoring signup - Fraudulent identity protection service - Fake settlement claim portal **Timing is key:** Scammers send these during real breach news cycles when people are primed to expect such emails.
How Scammers Make Contact
EmailText messages
02

Warning Signs & Red Flags

  • Email about breach you haven't heard about from the company directly
  • Urgent deadline to "secure your account"
  • Link doesn't go to company's official website
  • Asks for more information than needed (SSN, full credit card)
  • Generic greeting rather than your name
  • Email comes from lookalike domain
  • Grammar or formatting errors
  • Threatens account closure if you don't act
03

Real-World Example

"After the LastPass breach was announced, I got an email saying I needed to reset my master password immediately or my vault would be deleted. The site looked exactly like LastPass. I entered my old master password to create a new one. The scammers now had my real master password and access to everything."

— KrebsOnSecurity Reader Report
04

How to Protect Yourself

  • Don't click links in breach notification emails
  • Go directly to the company's official website to check for breach info
  • Verify breach announcements through news sources
  • Real breach notifications rarely require immediate action
  • Check the sender's email domain carefully
  • When in doubt, call the company using their official number
  • Be suspicious during major breach news cycles
05

What To Do If You're a Victim

  1. 1If you entered credentials, change that password immediately
  2. 2Enable 2FA on the compromised account
  3. 3Change the password anywhere you reused it
  4. 4Monitor the account for unauthorized activity
  5. 5Report the phishing email to the impersonated company
  6. 6Report to FTC at ReportFraud.ftc.gov
  7. 7Mark as spam and delete
Report This Scam
FTC Report Fraud FBI IC3 Identity Theft
?

Frequently Asked Questions

What is Fake Data Breach Notification?

A phishing email impersonates a breach alert — "your data was exposed, reset your password here" — and the link goes to a fake login or "identity protection" page built to capture credentials. The irony is the point: it weaponizes your fear of being hacked. Go to the real site directly, never through the email's link.

What are the warning signs of Fake Data Breach Notification?

Email about breach you haven't heard about from the company directly. Urgent deadline to "secure your account". Link doesn't go to company's official website. Asks for more information than needed (SSN, full credit card). Generic greeting rather than your name.

How do I protect myself from Fake Data Breach Notification?

Don't click links in breach notification emails. Go directly to the company's official website to check for breach info. Verify breach announcements through news sources. Real breach notifications rarely require immediate action.

What should I do if I'm a victim of Fake Data Breach Notification?

If you entered credentials, change that password immediately. Enable 2FA on the compromised account. Change the password anywhere you reused it. Monitor the account for unauthorized activity.

How serious is this threat?

We rate this a real but moderate risk. Reported losses: Part of $3 billion in business email compromise (2024). Most exposed: Anyone with email, employees of breached companies.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report Fake Data Breach Notification?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.
Sources & References
  1. 01FTC: Data Breach Response
  2. 02CISA: Phishing Guidance
Related Scams

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Bank Alert Text Scam

A text poses as your bank's fraud alert and asks you to confirm a charge or click to "secure" your account. Replying or clicking connects you to the scammer, not the bank. If a text makes you anxious about your money, call the number on your card — never the one in the message.

Password Extortion Scam

An email leads with one of your real old passwords and threatens to release webcam footage unless you pay in Bitcoin. The password came from an old breach, and the footage almost never exists. It is a bluff wrapped around one real detail — change any password still in use and do not engage.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free