Don't Get Hacked

1. It could happen to you. The Web is rife with anonymous crooks who thrive in an online underground where they peddle stolen personal data. This year alone, according to the Privacy Rights Clearinghouse, hackers stole more than 13 million records containing sensitive information, such as Social Security, financial-account and driver’s license numbers. “Companies don’t always know what’s been taken,” says Christopher Boyd, who researches cyber threats at GFI Software. “They have to assume everything was compromised even if there’s a good probability it wasn’t.”

2. Defend your PC. Hackers can wreak havoc using PCs they’ve infected with rogue software, says Matthew Prince, a Web security expert and founder of CloudFlare. Install the latest firewall, anti-malware and antivirus software on your home machine, and always download the recommended security updates for your programs and browsers. Secunia Personal Software Inspector is a free download that identifies vulnerabilities in applications such as Adobe Reader and Adobe Flash.

3. Pick your passwords wisely. And use a unique password for each of your online accounts. “A lot of people don’t change their password for different sites,” says Jacques Erasmus, of Webroot Software, who prowls hacker forums in search of the latest cyber-threat trends. “Hackers exploit this by using stolen passwords to log in to other sites to steal your money or identity.” A strong password has both upper- and lowercase letters, as well as numbers, punctuation marks and symbols; never use common names or dictionary words. KeePass, a free password-management program, can generate, store and protect all of your log-in credentials on your desktop and sync the data with your smart phone.

Subscribe to Kiplinger’s Personal Finance

Be a smarter, better informed investor.

Save up to 74%

Sign up for Kiplinger’s Free E-Newsletters

Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.

Profit and prosper with the best of expert advice - straight to your e-mail.

Sign up

4. Minimize the damage. If one of your online accounts has been breached, assume your data has been disclosed. If your credit or debit card numbers could have been leaked, cancel your compromised cards and compare your online statements with your credit card or ATM receipts. If your Social Security number is exposed, place a security freeze on your credit report, which locks your file so that only you and existing creditors can access your account. Visit Privacyrights.org for more recommendations on dealing with security breaches.

5. Surf responsibly. If you’re entering confidential information into a Web page, look for https:// in the URL bar to ensure your data is safe from meddlers. Never use a public Wi-Fi network to log in to your sensitive accounts. Instead, choose wireless connections that are password-protected. Better yet, sign up for a personal virtual private network service, such as Open VPN Shield Exchange.

6. Think before you click. Malicious code often lurks in sketchy downloads, pop-ups, links such as shortened URLs and sites your grandmother wouldn’t approve of. According to Symantec’s most recent Internet Security Threat report, 49% of search terms that resulted in visits to infected Web sites were seeking “adult entertainment.”