The Trump administration acknowledged in a recent court filing that U.S. DOGE Service members accessed and shared sensitive Social Security data without the knowledge of agency officials.

Reporting by The Washington Post said the admission followed whistleblower claims and a lawsuit alleging the data was misused for political purposes.

While the scope of the exposure remains unclear, privacy and identity-theft experts say the disclosure highlights a larger and ongoing risk for consumers: Social Security numbers are widely held, frequently accessed and among the most powerful tools criminals use to commit fraud.

Experts warn that even limited or unauthorized access to Social Security data can dramatically increase the risk of identity theft, often without victims realizing it until financial or tax damage has already occurred.

“These kinds of disclosures are extremely troubling,” said Steve Weisman, an attorney and publisher of the consumer protection website Scamicide.com. “Anyone affected by this is potentially at great risk of identity theft. Social Security numbers are the most critical piece of information when it comes to identity theft.”

Weisman said a stolen Social Security number can be used to open new credit accounts, take over existing ones, and commit tax fraud — sometimes years after the initial exposure.

For that reason, he and other privacy experts say consumers should not wait for confirmation that their own data was compromised. Instead, they recommend taking proactive steps now to limit potential damage.

Here are the most important actions experts say consumers should take to protect themselves from identity theft and fraud.

Steps experts say consumers should take now

TheStreet

Freeze your credit reports, including a lesser-known one

Consumers should place a credit freeze at each of the three major credit reporting agencies — Equifax, Experian, and TransUnion — to prevent criminals from opening new credit accounts in their name.

Weisman has also warned that many people overlook a critical fourth step: freezing their credit at the National Consumer Telecom & Utilities Exchange, or NCTUE, which is commonly used when approving cell phone and telecommunications accounts.

But credit freezes, while essential, are not a complete solution.

“Credit freezes are important, but they provide only partial protection,” said Liz Loewry, a former federal prosecutor and chief operating officer at EverSafe.

“As a prosecutor, it was rare that I saw evidence of a financial crime start in a credit report — and often it never appeared there,” she said.

Monitor your credit reports and avoid look-alike sites

Consumers can monitor their credit reports for free at AnnualCreditReport.com, the only legitimate site authorized for free access to credit reports.

Weisman has cautioned that many scam websites mimic free credit report services to collect Social Security numbers and other personal data. Experts recommend avoiding any site that requires payment or unnecessary personal information.

Monitor all financial accounts, not just credit

Because many types of fraud never appear on a credit report, Loewry said consumers should also closely monitor their existing financial accounts.

That includes checking savings, checking, investment, retirement, and current credit card accounts for suspicious transactions, as well as watching for the unauthorized opening of new bank accounts — activity that would not be flagged by a credit bureau.

“Sharing alerts with designated loved ones or professionals is also critical,” Loewry said, particularly for older adults or those who may not regularly review account activity.

Lock down your Social Security benefits

Experts strongly recommend establishing online access to Social Security benefits through the Social Security Administration’s MySocialSecurity account.

Both Weisman and Loewry said creating the account proactively can prevent criminals from setting one up first and redirecting benefit payments.

The portal also allows individuals to monitor benefit status and detect unauthorized changes.

Get an IRS Identity Protection PIN

Tax-related identity theft remains a persistent and damaging risk.

Consumers can request a free Identity Protection PIN from the IRS, which prevents criminals from filing fraudulent tax returns using a stolen Social Security number or taxpayer identification number.

The PIN must be renewed annually and used when filing a tax return.

Use two-factor authentication

Experts recommend enabling two-factor authentication on all financial and online accounts whenever possible.

The additional security step can stop unauthorized access, even if a password is compromised.

Watch for medical and dark web identity theft

Identity theft is not limited to financial accounts.

Loewry warned that criminals may use stolen personal information to create fraudulent medical claims, generate bogus insurance bills or compromise medical records. Reviewing medical statements and insurance paperwork carefully can help catch these problems early.

She also said monitoring whether personal information, such as a Social Security number or email address, is circulating on the dark web can provide early warning signs, even before financial damage occurs.

Related: Medicare mistakes seniors wish they’d known sooner