If you receive a data breach notice, first confirm it is legitimate by contacting the company directly. Immediately change your passwords for affected accounts and enable multi-factor authentication ...