So you gave personal info to a company caught in a data breach. Now what?

Hacks, ransomware attacks and data breaches seem to be in the news more and more often — and many people are getting alerts that their information has been compromised in the process.

Just this week, Petro-Points members learned an unauthorized party had obtained their basic contact information, such as mailing and email addresses, phone numbers and dates of birth. Petro-Canada sent an email to its customers to watch out for unusual emails and messages as a result.

In February, a ransomware attack on Indigo compromised the data of current and former employees. And late last year, thousands of people in Ontario were warned their personal information may have been compromised in a breach of the province's vaccine management system.

Getting one of those ominous emails or letters alerting you to a problem can leave you feeling powerless. But cybersecurity experts say there are helpful steps you can take to protect yourself  in the wake of a data breach — and to prepare for the next time it happens. 

"It's not if you're going to be breached, it's when you'll be breached," said Cat Coode, a data and privacy strategist who founded Binary Tattoo, a cybersecurity firm based in Waterloo, Ont.

Even if you haven't been alerted to a data breach, you can still take action.

Try entering your email address at HaveIBeenPwned.com, a free service that checks to see if your information has been breached, and exactly what has been put at risk. 

You can also sign up for notifications about future breaches involving your email address. 

If the breach involves your credit card number, call the company and let them know. It might be wise to ask your credit card company if you should change your number or cancel your card and get a new one altogether. You should also call credit reporting agencies — in Canada they are TransUnion and Equifax — alert them to the problem and check for any suspicious activity that might be affecting your credit score. 

The company that suffered the data breach might also offer you free credit monitoring. If they do, take them up on it — and insist on getting it for your children if they were affected, Coode said. While they may not have credit scores yet, their birth dates and other personal information could be used to apply for credit cards.

Keep an eye on your credit card statements for any unusual activity, too.

If you think you're the victim of identity fraud, you can also request a fraud alert or credit freeze be placed on your accounts, according to Carolyn Boris, a vice-president with Chubb Personal Risk Services.

You could even contact your insurance agent or broker to ask whether your policies provide any coverage for identity theft or related expenses, she said in an email.

Change the passwords of any affected accounts. It's also key to make sure all of your passwords are different — and yes, cybersecurity experts are well aware of how difficult that can make life.