THE FRAUD CODEXSCAM DETECTION
MEDIUM RISK

Fake Data Breach Notification

Phishing emails disguised as legitimate data breach notifications that trick you into entering credentials on fake "identity protection" or "password reset" sites.

Losses: Part of $3 billion in business email compromise (2024)
Targets: Anyone with email, employees of breached companies
Updated: 2026-01-07
Also known as: Breach Phishing • Fake Security Alert • Data Breach Scam

1How It Works

Scammers exploit real (or fabricated) data breaches to trick you into giving up credentials. **How it works:** 1. Major data breach makes news (or scammer fabricates one) 2. You receive "official" email: "Your data was compromised in [Company] breach" 3. Email urges immediate action: "Reset your password" or "Claim free credit monitoring" 4. Link goes to convincing fake site that captures your credentials 5. Scammers now have your real login info **Variations:** - Fake password reset page - Phony credit monitoring signup - Fraudulent identity protection service - Fake settlement claim portal **Timing is key:** Scammers send these during real breach news cycles when people are primed to expect such emails.

How Scammers Make Contact

EmailText messages

2Warning Signs & Red Flags

  • Email about breach you haven't heard about from the company directly
  • Urgent deadline to "secure your account"
  • Link doesn't go to company's official website
  • Asks for more information than needed (SSN, full credit card)
  • Generic greeting rather than your name
  • Email comes from lookalike domain
  • Grammar or formatting errors
  • Threatens account closure if you don't act

3Real-World Example

"After the LastPass breach was announced, I got an email saying I needed to reset my master password immediately or my vault would be deleted. The site looked exactly like LastPass. I entered my old master password to create a new one. The scammers now had my real master password and access to everything."

— KrebsOnSecurity Reader Report

4How to Protect Yourself

  • Don't click links in breach notification emails
  • Go directly to the company's official website to check for breach info
  • Verify breach announcements through news sources
  • Real breach notifications rarely require immediate action
  • Check the sender's email domain carefully
  • When in doubt, call the company using their official number
  • Be suspicious during major breach news cycles

5What To Do If You're a Victim

  1. 1If you entered credentials, change that password immediately
  2. 2Enable 2FA on the compromised account
  3. 3Change the password anywhere you reused it
  4. 4Monitor the account for unauthorized activity
  5. 5Report the phishing email to the impersonated company
  6. 6Report to FTC at ReportFraud.ftc.gov
  7. 7Mark as spam and delete

Report This Scam

FTC Report Fraud FBI IC3 Identity Theft

?Frequently Asked Questions

What is Fake Data Breach Notification?

Phishing emails disguised as legitimate data breach notifications that trick you into entering credentials on fake "identity protection" or "password reset" sites. Scammers exploit real (or fabricated) data breaches to trick you into giving up credentials. **How it works:** 1. Major data breach makes news (or scammer fabricates one) 2. You receive "official" email: "Your data was compromised in [Company] breach" 3. Email urges immediate action: "Reset your pa...

How common is this type of scam?

Fake Data Breach Notification is classified as a medium risk threat. Reported losses: Part of $3 billion in business email compromise (2024). This primarily targets Anyone with email, employees of breached companies.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks. Wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and FBI IC3 at ic3.gov.

How do I report this?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. Also contact your local police and your bank.

Sources & References

FTC: Data Breach ResponseCISA: Phishing Guidance

Related Scams

AI-Enhanced Phishing

Highly personalized phishing emails written by AI that are more convincing and harder to detect than traditional phishing attempts.

Bank Alert Text Scam

Fake fraud alert texts pretending to be from your bank, asking you to confirm transactions or click links to "secure" your account.

Password Extortion Scam

Emails claiming "I have your password" and threatening to release embarrassing webcam footage unless you pay Bitcoin — usually a bluff using passwords from old data breaches.

Think You've Encountered This Scam?

Use our free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free