Breach Response
What we do if a security incident exposes data.
We hope to never need this plan. But every site needs one. Here is what we do if a breach affects your data.
Step 1: Stop the Bleed
Our security team isolates the affected systems within minutes. We rotate keys, lock down access, and start a forensic copy of the affected logs and data stores.
Step 2: Tell You
We will email you within 72 hours of confirming a breach that affects your account. The email lists what was exposed, what was not, and what to do next.
Step 3: Help You Recover
If passwords were exposed, we force a reset. We offer a year of credit monitoring for any breach that includes payment data. We also publish a public report.
Step 4: Learn and Fix
Every breach gets a written post-mortem. We share what went wrong and how we changed our process. Our security team's annual report links every fix.
Quick tips
- •Use a unique password for RateAds.
- •Turn on two-factor authentication.
- •Watch for our breach emails—we never link to a sign-in page.
- •Check our security page for past incident reports.
Related articles
Keep exploring our trust and safety library
Was this article helpful?
We update Trust & Safety articles based on member feedback.