My Friend Got Hacked: The Domino Effect of an Email Breach

How Hacking Works (XKCD 2176)

It started with a simple realization: “I can’t log into my Amazon account.” My friend had noticed something was off. Her email felt… different. A quick check revealed the unsettling truth — her email account had been hacked, and the linked Amazon account? Closed.

The sinking feeling that followed is one I wouldn’t wish on anyone. But what happened next became a lesson worth sharing.

The Breach: How Did This Happen?

Hackers rarely guess passwords; they collect them. Over time, countless websites suffer data breaches. Your login credentials — email, password, sometimes even phone numbers — end up floating around in shady corners of the internet.

I introduced my friend to Have I Been Pwned, a service that reveals whether your email address has been part of known breaches. Unsurprisingly, her email was listed in multiple breaches. It’s not magic; it’s just a numbers game. Once a hacker has your email and an old password, they start testing it on other platforms.

If you reuse passwords across sites (come on, we’ve all done it at some point), they’ll find a way in.

Why Did They Close Amazon?

You might wonder: Why would a hacker close an Amazon account instead of draining it dry?

Here’s the likely reason: to cover their tracks. Closing the account prevents you from seeing recent orders, payment methods, or linked devices. It also buys them time to move on to their next target.

But closing accounts isn’t the worst thing they can do. What happens when you try to abandon a hacked email?

Don’t Close Your Hacked Email!

At first, my friend wanted to delete her compromised email entirely. It felt like the safest option — burn it down and walk away.

But here’s the thing: once an email address is deleted, it can eventually become available again. And guess who might scoop it up? The hacker. Now they own the email address outright and can start resetting passwords on every service linked to it.

Instead, I suggested:

1. Secure the email: Change the password and enable 2FA.
2. Check connected accounts: See what services were linked to that email.
3. Look for suspicious activity: Emails, orders, notifications.

It’s damage control, but it’s better than abandoning the digital fortress entirely.

What to Check After Your Email is Hacked

When recovering from an email breach, start by checking the most critical accounts:

1. Bank and Financial Accounts: Look for unauthorized transactions and change online banking passwords.
2. Shopping Platforms: Amazon, eBay, or any site with saved payment details.
3. Email Accounts: Secondary or recovery emails.
4. Cloud Storage Services: Dropbox, Google Drive, or similar.
5. Social Media Accounts: Facebook, Instagram, Twitter, LinkedIn.
6. Mobile Network: Ensure passwords and verbal verification are updated.
7. Streaming Services: Netflix, Spotify, or other subscriptions.

Prioritize accounts with financial or personal data exposure.

What to Do After Your Email is Hacked

Once you’ve checked the critical accounts, follow these steps:

• Secure the Email Account: Change the password, enable two-factor authentication (2FA), and review recent login activity.
• Enable 2FA Everywhere: Enable two-factor authentication on all critical accounts.
• Use a Password Manager: Generate unique, strong passwords for every account.
• Set Up Voice/Telephone Passwords: For financial institutions and services that support voice or telephone verification, set up a unique voice password. This helps prevent unauthorized access through social engineering during customer service calls.
• Audit Breached Accounts: Check all accounts listed in Have I Been Pwned and change their passwords.
• Look for Suspicious Emails: Search for password reset requests, forwarded emails, or login alerts. This will be an ongoing task because now that the hacker no longer has access to the email, they will likely attempt to exploit related accounts. Stay vigilant and monitor these emails regularly for any suspicious activity.
• Device Security: Ensure your devices have up-to-date antivirus software and review connected devices.
• Backup Important Data: Securely back up critical data in case of further compromise.

It’s tedious, yes. But every step matters.

Be Vigilant

Recovering your accounts is just the first step — now the real vigilance begins. Hackers don’t stop after losing access to your email; they shift tactics. Here’s what to watch out for:

• Fake Calls from Amazon or Banks: You might receive calls claiming to be from customer support, asking for further verification or saying they’ve sent you a 2FA code.
• Extortion Emails: You may receive emails claiming they have compromising photos or videos of you, often demanding payment.
• Phishing Emails: Look out for emails pretending to be from trusted services, asking you to reset passwords or verify accounts.
• SMS Scams: Hackers may send texts posing as official services, asking you to click on suspicious links.

Stay alert, verify any unexpected communication, and never share personal information over unverified channels.

Lessons Learned

This story isn’t unique — it happens every day. But it’s also preventable.

• Stop reusing passwords.
• Enable 2FA everywhere.
• Check your email exposure regularly.

Security isn’t just about tools — it’s about habits.

And if this story gets you to change even one habit, then my friend’s stressful experience wasn’t in vain.

Stay safe out there. Your digital life depends on it.