What to Do If Your Social Security Number Is Stolen (2026 Step-by-Step Guide)

If you've just learned that your Social Security number has been exposed — through a data breach notice, a suspicious credit report entry, or an IRS letter — the next 24 hours matter.

Your SSN is the master key to your financial identity. Here's exactly what to do, in order, to limit the damage.

---

How Do You Know If Your SSN Has Been Stolen?

Common warning signs include:

• A data breach notification from a company that had your information
• Unfamiliar accounts or hard inquiries on your credit report
• An IRS notice about income or a tax return you didn't file
• A denial letter for government benefits (unemployment, Medicaid, etc.) you never applied for
• Collection calls or letters for debts you don't recognize

Sometimes there's no warning at all — your SSN simply shows up in a breach dataset and sits there until someone uses it. That's why the steps below matter even if you're not sure anything has happened yet.

---

What to Do Immediately

1. Report It at IdentityTheft.gov

The FTC's IdentityTheft.gov is the official starting point. After answering a few questions, it generates a personalized recovery plan and pre-fills letters and forms you may need — including an Identity Theft Report, which can help you dispute fraudulent accounts later.

2. Place a Fraud Alert

A fraud alert is free and tells lenders to take extra steps to verify your identity before approving credit in your name. You only need to place it with one bureau — Equifax, Experian, or TransUnion — and it automatically notifies the other two. It lasts one year (extended alerts are available for confirmed identity theft victims).

3. Freeze Your Credit at All 3 Bureaus

A fraud alert adds friction; a credit freeze blocks new accounts entirely. This is the single most effective step you can take, and it's free.

See our full guide: How to Freeze Your Credit at All 3 Bureaus

---

---

4. Check Your Social Security Account

Create or log in to your my Social Security account at ssa.gov and review your earnings record. If someone is using your SSN for employment, you may see wages reported from an employer you've never worked for — a sign of employment identity theft.

5. Get an IRS Identity Protection PIN

If your SSN has been exposed, it's only a matter of time before someone may try to use it to file a fraudulent tax return. An IP PIN from the IRS blocks anyone — including you, without the PIN — from e-filing a return under your SSN.

See: Tax Identity Theft: How to Protect Yourself Before You File

6. Review Bank and Credit Card Statements

A stolen SSN is often paired with other stolen data. Go through recent statements on your existing accounts — a credit freeze doesn't protect accounts you already have, only new ones.

7. Watch for Medical Identity Theft

Your SSN can also be used to obtain medical care or prescriptions in your name. Review Explanation of Benefits (EOB) statements from your health insurer for services you didn't receive, and request a copy of your medical records if anything looks unfamiliar.

---

Can You Get a New Social Security Number?

In theory, yes — but in practice, almost no one does this, for good reason:

• The SSA only issues a new number in cases of ongoing harm that other remedies (fraud alerts, freezes, law enforcement reports) can't resolve
• A new SSN doesn't erase your financial and credit history — and disconnecting from that history can create new problems (e.g., a thin credit file)
• All the agencies, employers, and institutions tied to your old number need to be updated, which is its own lengthy process

For the vast majority of cases, the steps above — fraud alert, credit freeze, IP PIN, and ongoing monitoring — resolve the issue without needing a new number.

---

---

Why Ongoing Monitoring Matters After This

Completing the steps above addresses the immediate exposure — but a stolen SSN doesn't expire. The same number can resurface in new breaches, get sold and resold on the dark web, and be used months or years later when you've stopped checking.

This is the gap that identity theft protection services like Aura are built for: continuous SSN and dark web monitoring, 3-bureau credit monitoring with alerts, and — if something does go wrong again — a fraud remediation team to help you through it rather than figuring it out alone.

For details on what's included and current pricing, see our Aura pricing guide or full Aura review.

---

Bottom Line

If your SSN has been stolen or exposed, act in this order:

1. Report it at IdentityTheft.gov
2. Place a fraud alert (free, one bureau notifies all three)
3. Freeze your credit at all three bureaus (free, most effective)
4. Check your SSA earnings record for employment fraud
5. Get an IP PIN from the IRS before tax season
6. Review existing accounts and medical statements

A new SSN is rarely necessary or helpful. What actually protects you long-term is a combination of the steps above and ongoing monitoring — since a stolen SSN is a risk that doesn't go away on its own.