How to protect your accounts after a data breach
A short checklist for students whose details may have leaked, whether from ApilageAI’s old site or any other service: passwords, two-step verification and scam messages.
When a site is breached, the biggest risk usually comes afterwards, when attackers try leaked details on other accounts or use them to make scam messages believable. These steps help, whichever service was affected.
Do these first
- Change the password on the affected account.
- Change it everywhere else you used the same password, starting with your email.
- Give every important account its own password. A password manager makes this easy.
- Turn on two-step verification for your email and social accounts.
Then watch for scams
- Be suspicious of messages that quote your name, phone number or student ID. Leaked details can make a scam look real.
- Never share a password or one-time code, even with someone who says they work for the service.
- Open the site yourself instead of following a link in an unexpected message.
- Tell a parent, teacher or someone you trust if a message threatens you or asks for money. Sri Lanka CERT also handles reports of cyber incidents.
Share less from now on
Any service can be breached, so the safest data is data you never entered. Keep ID numbers, addresses and private photos out of chats and posts unless they are truly needed. If you no longer use an account, delete it.