JPMorgan Chase hacked: What to do if you have an account

JPMorgan_Chase_Tower A cyberattack on JPMorgan Chase this summer has compromised the accounts of 76 million consumers and seven million small businesses, according to a securities filing Thursday.

What should consumers do to protect themselves against identity theft and harm to their credit ratings?

New York Attorney General Eric T. Schneiderman offers tips for JPMorgan account holders and those who suspect they may be a victim of the security breach:

If you might be a victim:

Report to any of the three credit reporting agencies – Equifax, Transunion, or Experian – that you may have been a victim of identity theft. Make sure the credit reporting agency has your current contact information so it can get in contact with you.

Ask the credit reporting agencies to put a fraud alert on your credit file. This will still allow you to use your credit card. If you put a fraud alert on your file, you can ask for a free credit report from each of the credit reporting agencies. Contacting any one of the three credit reporting agencies is enough to file a credit alert with all of them. A credit alert needs to be renewed every 90 days.

You also have a right to put a credit freeze on your credit file. This will block someone from obtaining credit using your name or personal information. This means you won’t be able to apply for any new credit cards or loans while the freeze is in effect, but you can continue to use your existing cards. To freeze your credit file, you must notify each of the three major credit bureaus. You can remove the freeze temporarily or permanently by contacting each of the three agencies. There is no fee if you have been the victim of identity theft. You may be charged a fee of up to $5 if you haven’t been a victim.

You should also check your credit activity regularly with each credit issuer. You don’t need to wait for your monthly statement, though you should check that, too. Many banks provide online information to account holders about recent activity.

If you are a victim:

Create an identity theft fraud report. To create one, file a complaint with the Federal Trade Commission and print your Identity Theft Affidavit. You can call the FTC at 877-438-4338 or visit its website.

Use that to file a police report and create your Identity Theft Report.

An Identity Theft Report will help you deal with credit reporting companies, debt collectors, and any fraudulent accounts that the ID thief opened in your name.

Put a freeze, not just a fraud alert, on your credit report by notifying each of the credit reporting agencies. Only you can remove the freeze.

Get your credit report from each of the three agencies. You are entitled to free reports once you post a fraud alert or put a freeze on your account. Read the reports carefully to see whether other fraudulent transactions or accounts are listed, and then take steps to correct the errors.