Identity Theft Guide

What to Do If Your Social Security Number Was Leaked

A leaked Social Security number cannot be changed easily, so the goal is to make it useless to a thief. Here is the order that works.

Updated October 11, 2026
TL;DR

Freeze your credit at all three bureaus, review your free credit reports, enroll in the IRS Identity Protection PIN program, and report any misuse at IdentityTheft.gov. The Social Security Administration will only consider issuing a new number if misuse continues after you have done everything else, and a new number may not give you a clean credit history.

Your email may already be in a known data breach. Find out in about 30 seconds.

Free · About 30 seconds · No sign-up · Email not stored

Few leaks cause as much worry as a Social Security number (SSN). It is hard to replace and widely used to verify identity in the United States. A leak is serious, but it does not mean your identity will be stolen. This guide covers what official sources recommend.

If you are outside the United States, the same logic applies to your national identity number, so contact your national identity or data protection authority for local steps.

1. Freeze your credit

The FTC says a credit freeze is free to place and remove and is the best way to protect against an identity thief opening accounts in your name. You must contact each bureau separately: Equifax, Experian and TransUnion. A freeze at one bureau does not carry over to the others. It lasts until you lift it, and you can lift it temporarily when you apply for credit. Our credit freeze guide walks through the process.

2. Check your credit reports

Each nationwide bureau must give you a free report once every 12 months, and the bureaus have made weekly free checks at AnnualCreditReport.com permanent. Look for accounts, addresses or inquiries you do not recognize. Write down anything suspicious.

3. Get an IRS Identity Protection PIN

The IRS Identity Protection PIN (IP PIN) is a six-digit number that helps prevent someone filing a tax return with your SSN. A new IP PIN is generated each year. Anyone with an SSN or ITIN can enroll, and parents can request one for dependents. The fastest route is the online account, with Form 15227 or an in-person appointment as alternatives. Check the IRS page for the current enrollment rules.

Do not guess. See which breaches include your email and what leaked.

Free · About 30 seconds · No sign-up · Email not stored

4. Report misuse right away

If you see signs of misuse, go to IdentityTheft.gov and follow the recovery plan. Our guide on what to do if your identity is stolen covers the full sequence, including fraud alerts and contacting the affected companies.

5. Watch for follow-up scams

After an SSN leak, criminals sometimes email or call pretending to help. The FTC notes that "your information is on the dark web" emails may themselves be phishing. Do not click links or call numbers in them. Contact the company through a site or number you already know, and secure your email password first. See how to tell if a breach notice is real or phishing.

Can you get a new Social Security number?

Rarely. The Social Security Administration says it may assign a new number only if you have done all you can to fix the misuse and someone is still misusing your SSN. You must show evidence of ongoing problems and prove your identity, age and citizenship or immigration status. A new number is not available if your card is lost or stolen with no misuse, to avoid bankruptcy consequences, or to avoid the law.

The SSA also warns that a new number may not give you a clean credit history, because other agencies and credit bureaus may still link your records. A new number can create new problems, such as having no credit history. For most people, freezing credit and monitoring are the better path.

A leaked SSN is a long-term risk. It cannot be rotated like a password, so treat the credit freeze as a permanent habit and keep checking reports, not as a one-week project.

What not to do

  • Do not pay anyone who offers to "clean" your SSN or guarantee protection.
  • Do not give your SSN to unsolicited callers, even if they quote part of it.
  • Do not assume monitoring replaces a freeze. Monitoring tells you after something happens, while a freeze blocks new credit.

Sources

Frequently asked questions

Does a leaked SSN mean my identity has been stolen?

No. It means the number is exposed. Many people with leaked numbers never see misuse, especially if they freeze credit.

Should I place a fraud alert as well as a freeze?

A freeze is stronger, but a fraud alert is free and lasts one year, and it can be renewed. An extended fraud alert lasts seven years and requires a report.

Does a freeze stop tax fraud?

No. A credit freeze covers credit reports. The IRS Identity Protection PIN is the tool aimed at fraudulent tax returns.

What about my children's Social Security numbers?

The FTC says children under 16 can have a free credit freeze, and each bureau has its own process for minors.

Is identity theft insurance worth it?

The FTC says it generally does not repay stolen money or financial losses, so check coverage details carefully.

Step 1 · Free

See if your email has already leaked

  • Checks your email against known data breaches
  • Shows which sites leaked it, when, and what leaked
  • We do not store the email you check
Check my email free →
Step 2 · Fix exposed passwords

Change reused and leaked passwords

NordPass flags weak and reused passwords, and its Premium plan alerts you if your details appear in new breaches.

See NordPass →

Affiliate link. We may earn a commission at no extra cost to you.

Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.

Digital Footprint Scan creates practical privacy guides designed to help people understand and reduce unnecessary online exposure. Information can vary by website and jurisdiction, so check the current policies of the service or site involved before taking action. This guide is general information for the United States, not legal advice.