Step 1: Stay Calm and Verify the Breach

Before taking any action, ensure that the notification you received via mail or any other medium is legitimate. Scammers sometimes use fake breach alerts to steal even more information. Verify the notice by checking the organization’s official website or email. Also, try contacting their support team, or referring to any government cybersecurity announcements.
Step 2: Identify Which Data Has Been Compromised

Understanding what type of data has been breached will help you determine which step should be taken next. Organizations usually specify what information has been accessed, such as:
- Personal identifications (passport, visa, driver’s license)
- Contact details (email, phone number, address)
- Personal Financial information (bank details, credit card numbers)
- Login credentials (usernames, passwords)
- Academic records (school ID, qualifications, assessments)
If your passport data has been breached, we strongly recommend that you promptly contact the issuing authority (Locate your consulate) of the country of origin of your passport & seek advice.
If you are a student at Albright Institute and have received a breach notification, there is a chance the affected data may include your visa documents, study-related documents, or contact information. However, financial details or medical records are usually not impacted.
Step 3: Change Your Passwords

One of the first protective measures you should take is updating your passwords as soon as possible. If your login credentials were compromised:
- Change passwords immediately for affected accounts and any other linked accounts.
- Use a strong, unique password. The password should include a mix of letters, numbers and special characters.
- Enable multi-factor authentication (MFA) wherever possible for extra layers of security.
Step 4: Monitor Your Personal Financial Accounts and Credit Reports

- Inform your bank and financial institutions about the breach so that they can verify.
- Request a copy of your credit report from Equifax, Experian, or illion to check for any kind of suspicious activity in your financial accounts.
- Set up fraud alerts with your bank and credit agencies so that you can receive notifications about unusual transactions.
Step 5: Recognizing Fake Calls & Emails

- Unexpected Calls or Emails – If someone contacts you claiming to be from immigration, a bank, or a government agency, be cautious.
- Urgency & Threats – Scammers often create panic (e.g., “Your passport is being used illegally” or “Your visa will be canceled”).
- Asking for More Details – If they request additional personal info (like date of birth, bank details, or OTPs), it’s likely a scam.
Step 6: Handle Fake Calls & Emails

- Do Not Confirm Any Information – Even if they mention your name or passport number, don’t confirm or provide more details.
- Verify the Source –Hang up and call the official number of the bank/government agency to check if the call was real.
- For emails, check the sender’s address carefully (scammers use lookalike domains).
Step 7: Be Cautious of Phishing Websites

- Pretend to be from a trusted institution asking for additional personal information of yourself.
- Contain links to fake websites which are specifically designed to steal your login details.
- Encourage you to download malicious files.
- Never Click on Links or Attachments – They may contain phishing scams to steal login credentials.
Step 8: Monitor Your Digital Footprint

- Social media accounts for any suspicious messages or login attempts.
- Email inboxes for password reset requests which you did not initiate.
- Any other platforms where you stored your personal information..
Step 9: Stay Updated and Follow Official Updates

- Official emails, website announcements and text messages from your institution.
- Government cybersecurity resources, such as IDCare.org and the Office of the Australian Information Commissioner (OAIC).
- Contacting support services for guidance on protecting your data.
Step 10: Seek Support If You Feel Overwhelmed

Step 11: Know Your Rights and Report Any Identity Fraud

If you think that you are a victim of identity fraud, you can directly report it to:
- Australian Cyber Security Centre (ACSC) – to report cyber incidents.
- Your local police department – if you suspect identity theft.
- Office of the Victorian Information Commissioner (OVIC) – if you are not satisfied with an organization’s response to the breach.
Contact OVIC:
- Website: https://ovic.vic.gov.au/
- Phone: 1300 006 842
- Email: enquiries@ovic.vic.gov.au
Address: PO Box 24274, Melbourne VIC 3001