New York is one of the top 10 states most at risk for identity theft and fraud, according to a new WalletHub study released in the wake of a massive AT&T data breach.
The report ranks New York as the 8th most vulnerable state overall, based on metrics like complaint rates, average losses, and legal protections.
Where New York stands

New York scored especially high in average losses from online identity theft — landing at 7th in the nation — and also ranked 13th for identity-theft complaints per capita. While the state has some protections in place, like an identity-theft passport program, it still sees a steady stream of fraud reports.
Other New York rankings in the report:
- 14th in fraud and other complaints per capita
- 25th in median loss amount due to fraud
- 18th in credit freeze laws for minors
- 20th in crypto-related fraud losses
WalletHub used 15 different metrics to compare all 50 states plus Washington, D.C., analyzing data like how often people report fraud and how much money they typically lose.
Expert tips: How to protect yourself
Cybersecurity experts say the best defense is to stay alert and take simple precautions.
“One of the most effective ways to protect yourself is to freeze your credit with all three major bureaus,” said Chih-Chen Lee, a professor and certified fraud examiner. “It’s free, and it blocks anyone — even scammers — from opening accounts in your name.”
Others stressed the importance of staying on top of your financial accounts.
“The biggest thing people can do is pay attention,” said Dr. Philip Kim, a cybersecurity professor. “Thieves often start with small purchases to test whether you’re watching.”
Both experts recommend enabling multi-factor authentication, avoiding password reuse, and watching out for phishing scams that create urgency or impersonate authority figures.
Social media makes it easier for scammers
Social media isn’t just a place to post vacation pics — it’s also a gold mine for identity thieves. Experts say criminals can easily scrape personal info like birthdays, schools, or even family names from profiles.
“Even small bits of info, when pieced together, can give fraudsters enough to impersonate someone,” said Kim.
Lee agreed: “When you post birthday photos on Facebook, identity thieves can use that information to steal your identity.”
What’s next?
With breaches like the recent AT&T incident exposing over 44 million Social Security numbers, WalletHub says strong personal habits — like credit freezes, account monitoring, and smart online behavior — are more important than ever.



