What to do if…
your laptop is stolen and it contains sensitive personal documents

What to do now

1. Write down the key details before they blur.
   Note where and when the laptop was stolen, any witnesses, the device name, model, serial number if you can find it, and what sensitive documents were on it, such as Social Security number, passport scan, tax forms, bank statements, medical documents, HR files, or work files.

2. Use the official laptop-protection route, if it was already set up.
   For a Mac, use Apple Find My. For a Windows laptop, use Microsoft’s device page. For a work or school laptop, use the official IT or security channel. Lock the device, mark it lost, or erase it if that option is available and appropriate. If you see a location, do not try to recover it yourself.

3. Secure your main email account first.

   • Change the password from a trusted device.
   • Sign out of other sessions and devices in account settings.
   • Turn on multi-factor authentication if it is not already on.
   • Check for forwarding rules, mailbox rules, recovery emails, recovery phones, or connected apps you do not recognize.

4. Secure the accounts that could be abused fastest.
   Prioritize banking, credit cards, payment apps, cloud storage, and any password manager. Change passwords, revoke sessions or trusted devices, and check recent activity. If a password manager may have been open or accessible on the laptop, change the master password and review its device list.

5. Contact banks, card issuers, and payment apps if financial records or saved access were on the laptop.
   Ask them to watch for suspicious activity, remove trusted-device access where possible, and tell you whether they recommend replacing cards or changing account credentials.

6. File a police report for the theft and keep the report number.
   You may need the report number for insurance, employer reporting, device recovery, or later disputes if someone misuses your information.

7. Use credit protections if Social Security numbers, tax forms, or enough identity details were on the laptop.

   • A fraud alert can usually be placed by contacting one of the three major credit bureaus.
   • A credit freeze usually gives more direct new-credit protection and usually needs to be placed separately with each of the three major credit bureaus.

8. Use IdentityTheft.gov if sensitive identifiers were exposed or misused.
   If the laptop contained Social Security numbers, tax forms, government ID scans, or enough information to open accounts, use IdentityTheft.gov to make a recovery plan and keep a documentation trail.

9. Consider IRS identity-theft steps if tax records or Social Security numbers were on the laptop.
   If you are worried someone could file a tax return using your information, check the IRS Identity Theft Central page and consider an Identity Protection PIN.

10. Notify the organization immediately if the laptop was from work or school, or contained other people’s data.
    Use the official IT, security, privacy, or manager route. They may be able to disable access, force sign-outs, protect shared systems, and handle any required notifications.