Your phone number was in a data breach: what to do
In short
- A leaked number brings more scam texts and calls, and can help criminals with a SIM swap.
- Change passwords on accounts in the breach, use a password manager, and turn on two-step verification with an app.
- Have I Been Pwned lets you check an email address; its breach pages list what each leak contained.
Phone numbers leak in data breaches all the time, often with names, emails and addresses. You can’t change everything, but you can make the leak much less useful.
Check what leaked
Have I Been Pwned’s website search takes an email address and lists the breaches it’s in. Each breach page says what was taken, such as phone numbers, addresses or bank details, so you know how worried to be.
Protect your accounts
- Change the password on any account in the breach, and anywhere you reused it.
- Use a password manager to make strong, different passwords.
- Turn on two-step verification with an authenticator app. See text codes vs authenticator apps.
- Ask your mobile network for a PIN or password on your account. See SIM swap fraud.
Expect scam texts and calls
Leaked numbers attract scams. In the UK, forward scam texts to 7726; see scam text messages. Never share a code you didn’t ask for.
Next time
The fewer sites store your number, the fewer breaches it can be in. For sign-ups you won’t keep, a one-time number from ReserveSMS takes the code instead of your own.
Common questions
What can someone do with my leaked phone number?
Send scam texts and calls, and try to use it with your other details for a SIM swap or to get into accounts.
Can I check if my phone number was leaked?
Have I Been Pwned’s website search takes an email address; its breach pages list what each leak contained, including phone numbers.
What should I do after a breach?
Change affected passwords, use a password manager, turn on two-step verification with an app, and watch for scam texts.