What to do if your bank details are compromised in a cyber attack

When we pay for goods and services digitally, we’re entrusting these businesses and organisations with highly sensitive personal details. So we hope and expect that they’ll keep this information safe.

But three major UK airports were this week hit by a cyber attack, which saw hackers obtain data relating to nearly nine million people, such as their contact details, postcodes and vehicle registrations.

Thankfully, their banking details weren’t compromised this time around, but this latest cyber security incident is a worrying reminder of the ever-present risk that consumers face.

If you found out your bank details were exposed in a cyber attack, you might immediately worry about money being taken from your account and what it could mean for your finances.

Thankfully, there are practical steps you can take to protect yourself and get yourself on the front foot.

Act quickly

A cyber attack doesn’t necessarily mean that someone has access to your bank account or that money will be taken. 

It depends on what information was compromised. 

As we saw in this latest incident, personal details were obtained by hackers, but they weren’t financial details like card numbers and online banking passwords.

So if a company contacts you about a breach, find out precisely what information may have been exposed and check its advice carefully.

Contact your bank

If your bank details may have been compromised, get in touch with your bank using a trusted method, such as through their ap or the contact number displayed on your bank card.

Tell them what’s happened and ask what they think you should do to keep your account safe.

Depending on the situation, your account may be monitored by the bank, your card might be cancelled and replaced, or your account details may be changed.

Monitor your account

Keep an eye on your account for transactions you don't recognise, even if they’re only small.

Fraudsters sometimes make small payments first to check if an account is active.

Change your passwords

If your online banking password has been exposed, then change it straight away.

And if you use the same password elsewhere, change them too.

Ideally, you should be using a unique password for your online banking.

But the reality is, many people don’t do this, so multiple passwords might need to be changed.

You should also make a point of changing your email password, because if hackers get access to your inbox, they might be able to reset passwords for other services.

You can add an extra layer of security by turning on two-factor authentication (2FA) for your accounts. 

Watch out for follow-up scams

If your data is breached in a cyber attack, fraudsters might have everything they need to target you with a very convincing scam.

So if you get a phone call, text or email claiming to be from your bank or the company involved in the breach, then be wary.

Be especially cautious if you’re asked to reveal any sensitive details, “verify” your bank account” or transfer money to a “safe” or “secure” account.

No bank will ask you to move money elsewhere to keep it safe.

If you’re not sure whether the communication is real, contact the organisation using trusted contact details, such as the phone number listed on their website, and they’ll verify if they’ve tried to get in touch with you.

How to report a scam

If you spot a scam or believe you’ve been defrauded, report it to Report Fraud at www.reportfraud.police.uk or by calling 0300 123 2040.

If you get a scam email, forward them to [email protected], and if you received a dodgy text, forward it to 7726.

Check out our guide on how to outsmart online scammers for more tips to help you stay safe.