My account has been hacked — what now?
Recover via "forgot password" on a clean device, enable 2FA, log out sessions, warn contacts, file police report (Sr Art. 138ab), notify business under GDPR.
A hacked account = computer trespass (Sr Art. 138ab, max 4 years). Often also GDPR aspect — the business may have a data breach (Art. 33-34). Priority: restore access + stop further damage. Common hack routes: reused password (see password-leaked), phishing (see phishing), SIM swap (phone number taken over), or malware. Use a clean device! If you suspect your computer/phone is infected, recover via a different device — otherwise the hacker steals the new password immediately. On financial damage: call bank + file report. On identity damage: our Identity-theft Premium pack (€49). On stolen social media account: impersonation procedure at platform — often back within 24-48h.
Step by step
Change password via clean device
"Forgot password" → email reset on a second device. Strong unique password via password manager.
Enable 2FA + log out sessions
App-based 2FA (Google Authenticator/Authy), not SMS. In account settings: "Log out of all devices" / "End all sessions".
Police report + AP route
Politie.nl report (Sr Art. 138ab). Ask business for Art. 34 breach notification if breach was on their side. AP complaint on refusal or silence.
Warn contacts + check financial
Hacker often phishes your contacts. Send warning. On bank-account link: call bank + check transactions.
Ready to act?
We'll draft the right letter for you
Personalised PDF · Send-ready · One-off €9,99
- ⚡ PDF in your inbox in 60 seconds
- 📄 BTW-compliant invoice included
- ↩️ 30-day fix-it guarantee
Sources
🔎 Common search variants
Recognise your own search? Our answer above covers these too.
- “account hacked what to do”
- “instagram hacked recover”
- “gmail hacked netherlands”
- “sim swap fraud”