As online business owners, keeping finances secure and personal information safe for your customers are key to running a reputable business. But what about your own personal information as the one running the shop?
Imagine this: You run an online business making routine transactions with customers all over the country through a third-party shopping cart company. But one day, you discover that your Social Security number (SSN) has been showing up on customer receipts, compromising your business and your identity. What should you do?
It’s not a far-fetched scenario, as Social Security leaks are a rising vehicle for identity theft. How can you protect yourself?
Don’t miss
- Thanks to Jeff Bezos, you can now become a landlord for as little as $100 — and no, you don’t have to deal with tenants or fix freezers. Here’s how
- I’m 49 years old and have nothing saved for retirement — what should I do? Don’t panic. Here are 6 of the easiest ways you can catch up (and fast)
- Robert Kiyosaki warns of a ‘Greater Depression’ coming to the US — with millions of Americans going poor. But he says these 2 ‘easy-money’ assets will bring in ‘great wealth’. How to get in now
When your SSN is leaked through your business
In 2024, a massive data breach involving data broker National Public Data resulted in the exposure of Social Security numbers for over 270 million Americans – considered to be one of the largest breaches of sensitive personal data in U.S. history. But there are also risks involved when your own SSN as a business owner is exposed.
While the chance of a random customer using your Social Security number from a receipt for fraudulent purposes may seem remote, it highlights a broader concern: There could be numerous places throughout your business operations where your SSN is unnecessarily exposed to risk. Your SSN can often be found on online business tax forms, and depending on where you live, business licenses and permits.
Social engineers could also utilize the contact information you’ve posted online to pose as a customer to try to get you to reveal your SSN. They could also hack through your store’s cybersecurity protection system.
If cybercriminals obtain your Social Security number, they can inflict significant damage on your online business. They may open unauthorized credit accounts or secure business financing under your identity.
Read more: Want an extra $1,300,000 when you retire? Dave Ramsey says this 7-step plan ‘works every single time’ to kill debt, get rich in America — and that ‘anyone’ can do it
What to do during a leak
If your Social Security number has been exposed through your online business, it’s critical to act fast — not just to protect yourself, but also to safeguard your customers and preserve your business’s integrity.
Report the leak to the Federal Trade Commission (FTC) right away and fill out the information on their identity theft site. Next, place a fraud alert on your credit report at any one of the three major credit bureaus (Equifax, Experian and TransUnion). The alert lasts one year but you can extend it if the matter isn’t resolved quickly enough.
Third, freeze your credit – you must call all three bureaus to freeze your account. Freezing your credit is free and restricts access to your credit report, helping prevent new fraudulent credit accounts from being opened in your name. And if you suspect any fraudulent business tax filings using your SSN, file an Identity Theft Affidavit through the IRS.
Even though the breach was of your personal Social Security, you may be legally obligated to inform customers, clients and vendors of the leak, depending on where you live.
Preventing an SSN leak
Discovering that your Social Security number may have been compromised during business transactions can be alarming. However, there are proactive measures you can implement to protect yourself from potential identity theft.
Consider applying for an Employer Identification Number (EIN) to use on business forms and payment processors in place of your SSN. Don’t make business transactions or share personal information through email or unsecured sites, and make sure to enable multifactor authentication on all banking, payment and online marketplace sites.
Consider investing in more advanced cybersecurity software for your business, including password managers, encrypted data storage and cloud platforms. You may also want to consider purchasing Identity Theft Insurance for your business.
What to read next
- You don’t have to be a millionaire to gain access to this $1B private real estate fund. In fact, you can get started with as little as $10 — here’s how
- Here are 5 ‘must have’ items that Americans (almost) always overpay for — and very quickly regret. How many are hurting you?
- Accredited investors can now buy into this $22 trillion asset class once reserved for elites – and become the landlord of Walmart, Whole Foods or Kroger without lifting a finger. Here’s how
- Rich, young Americans are ditching the stormy stock market — here are the alternative assets they’re banking on instead
Stay in the know. Join 200,000+ readers and get the best of Moneywise sent straight to your inbox every week for free. Subscribe now.
This article provides information only and should not be construed as advice. It is provided without warranty of any kind.