TL;DR: Setting up a new device is a natural point to check what's already been exposed, since any accounts you sign back into will surface saved passwords, autofill data, and sync settings tied to information that may have appeared in past breaches. Run a check of your email and phone number against known data breaches, update any passwords flagged as compromised or reused, and review synced accounts on the new device to confirm only what you intend is being carried over.
Setting up a new device is a natural point to check what's already been exposed, since any accounts you sign back into will surface saved passwords, autofill data, and sync settings tied to information that may have appeared in past breaches.
What Usually Causes This
Your digital footprint accumulates over years across every account, app, and website you've used — a new device doesn't create new exposure, but it's a convenient moment to review what's already out there.
What to Do About It
Run a check of your email and phone number against known data breaches, update any passwords flagged as compromised or reused, and review synced accounts on the new device to confirm only what you intend is being carried over.
If this looks similar to something else you've seen, it's worth reading How to Tell If Your Email Was Used to Sign Into a New Device.
This pattern shows up elsewhere too — see How to Check If Your Browser Has Been Hijacked.
Frequently Asked Questions
What are the real warning signs?
Setting up a new device is a natural point to check what's already been exposed, since any accounts you sign back into will surface saved passwords, autofill data, and sync settings tied to information that may have appeared in past breaches.
What usually causes this?
Your digital footprint accumulates over years across every account, app, and website you've used — a new device doesn't create new exposure, but it's a convenient moment to review what's already out there.
What should I do about it?
Run a check of your email and phone number against known data breaches, update any passwords flagged as compromised or reused, and review synced accounts on the new device to confirm only what you intend is being carried over.
Should I be worried if I only see one sign?
One sign alone (like a slower device) is usually not cause for alarm — most single symptoms have mundane explanations. Multiple signs together, especially unexpected data usage or unfamiliar apps, are worth investigating.