There are various further steps you can (and should, imho) take if ANY billing information has been compromised. Further identity theft may have taken place. Billing info hits most radars first because people usually keep tabs on their checking, savings, and credit card balances. But if someone’s compromised one thing, they might’ve gotten their grubby hands on more.
Consider filing a police report, and I’d talk to your financial institution about putting together a fraud affidavit, which requires a notary stamp. It may not be necessary but it is worth asking about. Especially you, Raguleader. Often a fraud affidavit is involved if activity occurs on a closed account/number, or if you and your financial institution decide the best way to handle the issue is to close an account and start a new one (stolen checkbook, etc). If you file a police report, they’ll want the fraud affidavit information, and the bank will want to know your police report number. Also, you may need to provide the affidavit and police report numbers to any businesses where the theif made a transaction using your account, to clear your name with them.
There’s lots of good suggestions in this vein, and an ID Theft affidavit form, available on the FTC’s ID Theft site:
It covers things such as putting a fraud alert on your credit profile, closing any unauthorized accounts set up with your identity, and involving law enforcement.
To clarify the difference between a fraud affidavit and the ID theft affidavit, if the only thing compromised is a single account, the fraud affidavit is between you and that bank. An ID theft affidavit will help you deal with similar issues on a larger scale, especially if your Social Security number is compromised.
In my case, a theif who had broken into my house found an old box of checks (old address, but my account number was the same) that I didn’t even know I’d had. 6 months after the breakins, old checks with forged signatures started hitting my account. I only had to deal with my bank and clear my name at any of the businesses where the stolen checks were used. A fraud affidavit was sufficient, and I didn’t need to take further steps.
Just don’t lull yourself into a false sense of security, and familiarize yourself with all of the ways that your personal information could be used without authorization, and monitor those avenues for a long enough time to ensure that you detect potential problems early.