Too many people respond with a shrug and maybe change their password. That’s asking for trouble.
3 min
How do consumers respond when their online accounts are exposed to hackers? Many of them simply don’t.
Data breaches at major firms have become all too common, with more than 110 million user accounts exposed in just the second quarter of 2023. Yet our research found that nearly two-thirds of U.S. consumers would return to a site after they were notified of a breach—with only the bare minimum of precautions, like changing their passwords.
Almost a quarter of the roughly 200 people we surveyed said they would return to the compromised website with no changes to their behavior at all. Only 10% said they wouldn’t go back.
Even people who had cybersecurity training within the past 90 days—in other words, people who should be primed to protect themselves—took risks. In this subsequent study, over a quarter of roughly 500 people said they would return to the breached website while taking the absolute minimum security measures, and only about 9% would take more-complicated steps such as setting up two-factor authentication. And they would do that only if they experienced real financial consequences, like fraudulent charges on their credit cards.
Why wouldn’t people protect themselves? Many of the consumers we surveyed believed that there were few—if any—alternatives to the websites they used frequently, and all websites seemed to be affected by data breaches. Why bother beefing up security? Likewise, some people said they would stick with a compromised site because they had put so much time and effort into their presence on it—a classic sunk-cost fallacy.
Since doing nothing may put your finances and personal information at risk, what should you do in case of a breach? Based on my experience as a researcher in this domain and guided by input from customers recovering from data breaches, I recommend the following actions.
Take each data-breach notification seriously. Immediately change passwords on the affected sites and sign up to follow the updates from the breached firm. This is also a good time to ensure your passwords are unique and not being used across several sites.
Find out what kind of breach it is. Some breaches violate your privacy—such as stealing your playlist or viewing preferences—but may not be as damaging as other hacks. So they may just require a simple password change on the affected site. Even the breach of encrypted password data, such as in the LastPass data breach, while serious, isn’t an immediate threat.
On the other hand, things like compromised credit-card numbers, financial data and personally identifiable information need stronger attention. Even seemingly innocuous breaches of social-media networks may reveal data that can be used to impersonate you and perhaps be used to invade the privacy of those around you. For instance, hackers might be able to figure out your “forgot password” questions on websites by learning where you grew up, the names of your pets and more.
Set up push notifications for financial data. When you’re notified of data breaches that involve credit cards or payment information, review the transactions on the affected accounts, going back to the previous payment period. Whether or not there has been unusual activity, protect yourself by adding mobile push notifications for credit-card transactions—an option offered by most credit cards, online-payment mechanisms and banks. Most notifications happen in real time, so consumers affected by data breaches can quickly identify and contest improper charges.
Use free credit monitoring. Some credit cards and banking firms such as Discover and Chase provide free monitoring of consumer credit and provide monthly updates of noteworthy events and changes. Some go further and provide benefits such as removal of your personally identifiable information found on public sites, including data brokers. Using these services is an easy way to identify and report fraudulent activity, as well as protect against identity theft—so review this data regularly if your information has been exposed.
Enable dual-factor authentication on all of your accounts. This is a good practice in general but is especially important for anyone affected by data breaches. With dual-factor authentication, you enter your password as usual but then confirm your identity using a personal device, typically a mobile phone. This limits someone from logging into the account with a stolen password.
Along with enabling dual-factor authentication, there are a number of steps you should take in the event of a social-media breach.
First, change the password and log in with the new one. Check the login-activity page to see if anyone other than you has logged in, and then look for the option to delete all other active sessions—so every other device that is currently logged in is effectively logged out.
Also review all direct messages, posts, and comment activity on the account, and report anything suspicious. If it affects other people, let them know. Finally, pause or temporarily deactivate the account, if that is an option, to make it even tougher for hackers to get access.
Rajendran Murthy is the J. Warren McClure Research Professor of Marketing at the Rochester Institute of Technology’s Saunders College of Business.
Copyright 2020, Dow Jones & Company, Inc. All Rights Reserved Worldwide. LEARN MORE
BNW Developments has established a Sydney presence, joining Arada and Sobha Realty among the growing number of UAE developers pursuing Australian buyers and development opportunities.
The Australian leather house has opened an immersive four-day pop-up in Manhattan, unveiling its Bloom Collection and redefining what a product launch can look like.
Strong family financial planning can help reduce taxes and support younger generations. From intrafamily loans and asset gifts to inheritance disclaimers, strategic cooperation can create meaningful financial benefits—when families have the trust and structure to make it work.
4 min
Happy is the family whose members—parents, grandparents and grown children—trust each other enough to cooperate on shared goals, especially financial ones. When that is truly the case, Uncle Sam’s tax rules can help as well.
This matters especially now that mortgage rates are above 7%, and many families are looking for ways to help younger members. If the elders have resources and are confident younger ones can cooperate, a family loan could make homeownership possible while providing the elders with a useful income stream.
Other strategies can actually lower taxes, such as when funding 529 plans or Roth IRAs, or when someone inherits a traditional IRA with required withdrawals larger than they will need.
Here are three strategies useful for functional families.
It is perfectly legal for families to lend money to a relative for a down payment or even a private mortgage.
But it is important not to cut corners, says Ryan McKeown, a CPA with Modern Wealth Enhancement in Minnesota. If the loan is for a down payment, be honest with the mortgage provider and have a formal agreement. The lender owes tax on the interest payments received.
If the loan is for a private mortgage, both sides should have legal representation with a formal written agreement, including payment terms. The lender owes tax on the interest, and the borrower often can deduct it if he or she itemizes.
To avoid IRS trouble, the interest rate shouldn’t be lower than the agency’s Applicable Federal Rate at the time of the loan. Currently that is about 5% for loans longer than nine years; about 4.5% for loans three to nine years; and about 4% for loans three years or less. Currently, traditional mortgage rates are generally above 7%.
In addition, the lender could use the $19,000 annual gift-tax exemption (described below) to forgive some or all of the interest or principal annually. If both lenders and borrowers are married, that is up to $76,000 a year. There is no tax for the borrower on such forgiveness, because it is from a gift.
If you’re going this route, McKeown advises against having a fixed plan to forgive the debt. Instead, do it in one-off letters specifying the amount—and keep careful records. Otherwise the IRS might try to treat the loan as a taxable gift.
Powerful tax-saving moves for families often use gift-tax provisions. Under current law, anyone can give anyone else up to $19,000 of assets annually, free of gift tax. That means a married couple with three grandchildren could give them a total of $114,000 in 2026.
The gifts can be cash or other assets, like stock. For noncash gifts, the cost basis—which is the starting point for measuring taxable gain after a sale—“carries over” to the recipient. So if someone buys $1,000 of stock and gives it away when it is worth $5,000, the recipient’s cost basis is $1,000. If the recipient later sells the shares for $8,000, the taxable gain is $7,000.
Here’s an example showing how gifts could save a family taxes. Grandma is a widow of modest means, while her child and spouse have prospered. The couple has two children, and they want to contribute $5,000 to a 529 college-savings plan for each—but they need to sell stock to do it. Their tax rate on the sale would be 18.8%, and they would need to sell about $11,000 of stock.
However, Grandma’s federal tax rate on the stock sale is 0%. If the couple gives $10,000 of shares to Grandma, she could sell them, pay no tax, and fund the grandchildren’s 529 plans. This saves about $1,000 of tax.
These moves are legal, and they could be used in other ways, such as to help a young person fund a Roth IRA.
But trust among family members is essential: Under the law, givers can’t put conditions on a gift. Grandma could use her stock proceeds to take a cruise, but she makes 529 contributions instead.
Mark Sellner, a retired tax attorney and CPA living in Sarasota, Fla., uses this strategy. His children sell stock he gives them and fund 529 plans for his grandchildren.
The family’s tax savings aren’t huge, but he likes other benefits. The sales by his children don’t boost his adjusted gross income, which in turn could raise his Medicare Irmaa premiums or his 3.8% surtax on net investment income.
Sellner doesn’t worry about his children using the funds for another purpose.
“There can’t be any strings attached to gifts. Of course, it is up to us to decide whether to make them in the future,” he says.
Two caveats: The “kiddie tax” applies to most children under age 24, and it is levied at the parents’ rate on investment income above $2,700 in 2026. Consider this before making gifts to a young person.
Investors who give away stock also forgo the step-up, an important provision that exempts assets held at death from capital-gains tax.
Sellner knows he’s losing a step-up, but says, “The children could use a little more now. Why should they wait 20 years to get it?”
A disclaimer is a highly useful strategy in which one heir renounces an inheritance in favor of another heir. Assuming family members cooperate, this can save taxes.
Here’s one example. Dad died and had a large traditional IRA that he left to Mom. She has enough assets and income to cover her expenses, and she lives in a state with a stiff estate tax. The inherited IRA would put her estate over the threshold.
Also surviving are three young-adult children. If Mom disclaims all or part of Dad’s IRA within nine months of his death, that amount could go directly to the children. They will have 10 years to empty the account, and the family as a whole will likely save estate and income taxes.
Disclaimers have many key details, especially regarding beneficiary documents. Although heirs have great freedom in choosing what assets to disclaim, the rules about who gets disclaimed property are rigid. It is best if the original owner names tiers of heirs so that if one disclaims, the next recipient is clear.
